To automatically download and install ActiveX controls

[Spin]

The ability to automatically download and install ActiveX controls means one
has to set their browser to either "Low Security", or they need to
"Customize" their current security level to allow to download and install
ActiveX controls, or add the site to their IE Trusted Sites list. Do I
understand this correctly?

 

[Colin Barnhorst]

Yes, but is a security risk to do it that way. In IE7 there won't be any
automatic ActiveX installation permitted for that reason. It is better to
be notified about such installations.

 

[Spin]

ActiveX is a security risk period. I am interested in how people manage
allowing ActiveX in IE their environments.

--
Spin

Yes, but is a security risk to do it that way. In IE7 there won't be any
automatic ActiveX installation permitted for that reason. It is better to
be notified about such installations.

 

[Frank Saunders, MS-MVP OE]

ActiveX is a security risk period. I am interested in how people
manage allowing ActiveX in IE their environments.

I have had no trouble allowing ActiveX. Of course, I'm careful where I go.

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Bruce Chambers]

ActiveX is a security risk period. I am interested in how people manage
allowing ActiveX in IE their environments.

Set IE to prompt for installation, of course, and don't allow users to
run under elevated privileges, so that even if they click <Yes> nothing
happens without a knowledgeable technician checking the safety of the
control.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Spin]

Do you manage allowing it through group policy or do so on a individualized
machine basis?

 

[Frank Saunders, MS-MVP OE]

Do you manage allowing it through group policy or do so on a
individualized machine basis?

Never used Group Policies.

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Bruce Chambers]

Do you manage allowing it through group policy or do so on a individualized
machine basis?

Allowing is done on an individual basis, provided that access to the
web site is required for the performance of the user's duties.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Spin]

Oh that's right, I believe you have to be an administrator of a machine to
allow the installation of an ActiveX control.