«

No, seriously

I'm trying to write a Group Policy to allow certain ActiveX controls to
load on machines without local admin privileges. This is what I've come
up with, but for some reason it won't work. Anyone out there ever done
this before? What have I done wrong?


************************************************** **********
CLASS USER
CATEGORY "Windows Components"
CATEGORY "Internet Explorer"
CATEGORY "Administrator Approved Controls"
KEYNAME
"Software\Policies\Microsoft\Windows\CurrentVersio n\Internet
Settings\AllowedControls"


POLICY "Allowed ActiveX"
EXPLAIN "Allows specific ActiveX to run"
PART "Promax Logon" CHECKBOX
VALUENAME {ED5BE7F4-9C97-4013-8838-48C20128D73A}
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END PART
END POLICY


END CATEGORY ;; AdminApproved
END CATEGORY ;; Internet Explorer
END CATEGORY ;; WindowsComponents

************************************************** **************

Valuename is the ID # from the control in the downloaded program files,
and the policy shows up, and is enabled in the GPO snap-in.

--
JaR
Scratching head in confusion, as usual
Remove hat to reply

Obviously not ON topic enough...



....or maybe it was too on topic...who knows around here.



--
CG

"JaR" <> wrote in message
news:uXY#...
> No, seriously
>
> I'm trying to write a Group Policy to allow certain ActiveX controls to
> load on machines without local admin privileges. This is what I've come
> up with, but for some reason it won't work. Anyone out there ever done
> this before? What have I done wrong?
>
>
> ************************************************** **********
> CLASS USER
> CATEGORY "Windows Components"
> CATEGORY "Internet Explorer"
> CATEGORY "Administrator Approved Controls"
> KEYNAME
> "Software\Policies\Microsoft\Windows\CurrentVersio n\Internet
> Settings\AllowedControls"
>
>
> POLICY "Allowed ActiveX"
> EXPLAIN "Allows specific ActiveX to run"
> PART "Promax Logon" CHECKBOX
> VALUENAME {ED5BE7F4-9C97-4013-8838-48C20128D73A}
> VALUEON NUMERIC 0
> VALUEOFF NUMERIC 1
> END PART
> END POLICY
>
>
> END CATEGORY ;; AdminApproved
> END CATEGORY ;; Internet Explorer
> END CATEGORY ;; WindowsComponents
>
> ************************************************** **************
>
> Valuename is the ID # from the control in the downloaded program files,
> and the policy shows up, and is enabled in the GPO snap-in.
>
> --
> JaR
> Scratching head in confusion, as usual
> Remove hat to reply

On 2/21/2008,Robert Williams [CertGuard] had the unmitigated gall to
claim:

> Obviously not ON topic enough...
>
>
>
> ...or maybe it was too on topic...who knows around here.

Posted it in the Group Policy...errr...group as well. No response there
so far, either.

Oh well.

Nobody ever said this stuff was easy.

--
JaR
Just once would be nice
Remove hat to reply

"JaR" <> wrote in message
news:...
> On 2/21/2008,Robert Williams [CertGuard] had the unmitigated gall to
> claim:
>
>> Obviously not ON topic enough...
>>
>>
>>
>> ...or maybe it was too on topic...who knows around here.
>
> Posted it in the Group Policy...errr...group as well. No response there
> so far, either.
>
> Oh well.
>
> Nobody ever said this stuff was easy.
>
Knowing your superior google skills, I have to ask if you've been able to find
anything on the topic. There are a few pretty good scripting sites out there.

"JaR" <> wrote in news:e0RTmEMdIHA.4140
@TK2MSFTNGP04.phx.gbl:

> On 2/21/2008,Robert Williams [CertGuard] had the unmitigated gall to
> claim:
>
>> Obviously not ON topic enough...
>>
>>
>>
>> ...or maybe it was too on topic...who knows around here.
>
> Posted it in the Group Policy...errr...group as well. No response there
> so far, either.
>
> Oh well.
>
> Nobody ever said this stuff was easy.


This stuff is easy.


Now you can't say that anymore.

"JaR" <> wrote in news:uXY#Xw9cIHA.2688
@TK2MSFTNGP06.phx.gbl:

> No, seriously
>
> I'm trying to write a Group Policy to allow certain ActiveX controls
to
> load on machines without local admin privileges. This is what I've
come
> up with, but for some reason it won't work. Anyone out there ever done
> this before? What have I done wrong?
>
>
> ************************************************** **********
> CLASS USER
> CATEGORY "Windows Components"
> CATEGORY "Internet Explorer"
> CATEGORY "Administrator Approved Controls"
> KEYNAME
> "Software\Policies\Microsoft\Windows\CurrentVersio n\Internet
> Settings\AllowedControls"
>
>
> POLICY "Allowed ActiveX"
> EXPLAIN "Allows specific ActiveX to run"
> PART "Promax Logon" CHECKBOX
> VALUENAME {ED5BE7F4-9C97-4013-8838-48C20128D73A}
> VALUEON NUMERIC 0
> VALUEOFF NUMERIC 1
> END PART
> END POLICY
>
>
> END CATEGORY ;; AdminApproved
> END CATEGORY ;; Internet Explorer
> END CATEGORY ;; WindowsComponents
>
> ************************************************** **************
>
> Valuename is the ID # from the control in the downloaded program
files,
> and the policy shows up, and is enabled in the GPO snap-in.
>


OK. I'm here to help. I found this:

http://dontpokebadgers.com/axaa/

....but it look eerily like what you have already presented - perhaps
this is where you go it from?

anyway...based on this I say you're doing it right.

....so there really is no problem.

Your welcome.

kpg

hmmmm... seems Vista solves all your problems.

http://www.microsoft.com/technet/tec.../2007/07/AxIS/

....who would have thought.

On 2/22/2008,kpg* had the unmitigated gall to claim:
>
> OK. I'm here to help. I found this:
>
> http://dontpokebadgers.com/axaa/
>
> ...but it look eerily like what you have already presented - perhaps
> this is where you go it from?
>

That's where I found it alright.

> anyway...based on this I say you're doing it right.

Oh, goody.

>
> ...so there really is no problem.

*whew* What a relief.

>
> Your welcome.
>

My what?


--
JaR
So why don't it fscking work?
Remove hat to reply

On 2/22/2008,kpg* had the unmitigated gall to claim:

> hmmmm... seems Vista solves all your problems.
>
> http://www.microsoft.com/technet/tec.../2007/07/AxIS/
>
> ...who would have thought.

*spit*

--
JaR
And so much more, too...
Remove hat to reply

On 2/22/2008,Robert Williams [CertGuard] had the unmitigated gall to
claim:

> Knowing your superior google skills, I have to ask if you've been
> able to find anything on the topic. There are a few pretty good
> scripting sites out there.

Nope. My post to the GP group has not even gleaned a reply, either.

IDGI! I know it's prolly something stupid I'm doing.

--
JaR
But I'm learning a ton about GP!
Remove hat to reply