Security setting on ActiveX controls

Guys,

I can't update my Windows 2000 as I get the message that the security
settings prohibit running ActiveX controls.

Can anyone help me to change these settings ?

Thanks in advance

Internet Options | security tab | custom button | ActiveX section
right click to get "what's this" and don't set 'em too unsafe.
I think that default level works, but I don't want to change
all the settings back to what I've got, so I didn't try it for you.

"Phil" <> wrote in message
news:712AD71C-4DF3-47D1-8856-...
> Guys,
>
> I can't update my Windows 2000 as I get the message that the security
> settings prohibit running ActiveX controls.
>
> Can anyone help me to change these settings ?
>
> Thanks in advance

"Michael Jennings" <> wrote in message
news:...
> Internet Options | security tab | custom button | ActiveX section
> right click to get "what's this" and don't set 'em too unsafe.
> I think that default level works, but I don't want to change
> all the settings back to what I've got, so I didn't try it for you.
>
> "Phil" <> wrote in message
> news:712AD71C-4DF3-47D1-8856-...
>> Guys,
>>
>> I can't update my Windows 2000 as I get the message that the security
>> settings prohibit running ActiveX controls.
>>
>> Can anyone help me to change these settings ?
>>
>> Thanks in advance

First just go to the Microsoft windows update site and copy the URL from the
browser. It's going to be something like
http://v5.windowsupdate.microsoft.com . It might be v4 for Windows 2000,
but whatever it says copy it.

Then in IE select Tools/Internet Options.../Security then select "Trusted
Sites" then hit the "Sites" button.

Place the URL from above into the "Add this Web site to the zone:" If
there is a selection that is checked that says "Requires server verification
(https for all sites in this zone" un-check it. Then select "Add".

This should allow the ActiveX stuff to work for Windowsupdate without
leaving you wide open for all other sites.

Trusted sites use the "Trusted Sites" security settings whereas all other
Internet sites use the "Internet" settings which is where you have ActiveX
turned off (and a very good thing to do I might add). Turning most of the
ActiveX stuff off has finally put an end to incessant loading of my machine
with adware/spyware garbage from various web sites.

Curtis

Curtis Eickerman wrote:
>
>
> First just go to the Microsoft windows update site and copy the URL
> from the browser. It's going to be something like
> http://v5.windowsupdate.microsoft.com . It might be v4 for Windows
> 2000, but whatever it says copy it.
>
> Then in IE select Tools/Internet Options.../Security then select
> "Trusted Sites" then hit the "Sites" button.
>
> Place the URL from above into the "Add this Web site to the zone:"
> If there is a selection that is checked that says "Requires server
> verification (https for all sites in this zone" un-check it. Then
> select "Add".
>

The WinUpdate URL on my Windows XP presently is
http://windowsupdate.microsoft.com/ and in the Trusted Sites it is marked as
https://windowsupdate.microsoft.com/ , no v5 or whatever. Does that
eventually explain why my Windows Updates remains frozen?

rs

Curtis Eickerman wrote:
>
>
> First just go to the Microsoft windows update site and copy the URL
> from the browser. It's going to be something like
> http://v5.windowsupdate.microsoft.com . It might be v4 for Windows
> 2000, but whatever it says copy it.
>
> Then in IE select Tools/Internet Options.../Security then select
> "Trusted Sites" then hit the "Sites" button.
>
> Place the URL from above into the "Add this Web site to the zone:"
> If there is a selection that is checked that says "Requires server
> verification (https for all sites in this zone" un-check it. Then
> select "Add".
>

The WinUpdate URL on my Windows XP presently is
http://windowsupdate.microsoft.com/ and in the Trusted Sites it is marked as
https://windowsupdate.microsoft.com/ , no v5 or whatever. Does that
eventually explain why my Windows Updates remains frozen and in the end only
showed a blank page?
I entered the URL without the sss after unchecking the 'Server Verification'
and I obtained at least one improvement: the WinUpdate page appears again
and for the first time I got an 0x8DDD0004 error notification after a
recurring message about security settings colliding with ActiveX.
I go on searching, after all I'm at it only for one month and a half.

rs

PS - After restarting Internet Explorer I obtained
http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr
as WinUpdate URL. Guess I can play around with
http://v5.windowsupdate.microsoft.com
The message about the conflict between security settings and ActiveX
hampering normal display of the page however seems to indicate where the
real trouble lies.

rs wrote:
> Curtis Eickerman wrote:
>>
>>
>> First just go to the Microsoft windows update site and copy the URL
>> from the browser. It's going to be something like
>> http://v5.windowsupdate.microsoft.com . It might be v4 for Windows
>> 2000, but whatever it says copy it.
>>
>> Then in IE select Tools/Internet Options.../Security then select
>> "Trusted Sites" then hit the "Sites" button.
>>
>> Place the URL from above into the "Add this Web site to the zone:"
>> If there is a selection that is checked that says "Requires server
>> verification (https for all sites in this zone" un-check it. Then
>> select "Add".
>>
>
>
>
> PS - After restarting Internet Explorer I obtained
> http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr
> as WinUpdate URL. Guess I can play around with
> http://v5.windowsupdate.microsoft.com
> The message about the conflict between security settings and ActiveX
> hampering normal display of the page however seems to indicate where
> the real trouble lies.


I got some improvement once I began running
http://windowsupdate.microsoft.com and
http://v5.windowsupdate.microsoft.com (https:// windowsupdate.microsoft.com
deleted) together in the Trusted Sites, Server Verification unchecked. As a
consequence of the five ActiveX sections three were now activated while the
two remaining ones moved from Blocked to Ask. (Hope this will not open the
system to all kinds of attacks despite firewall, antivirus and malware
chasers.)

The logical result of these changes is that I no longer receive the warnings
about bad page display due to security settings fettering ActiveX controls.
The 0x8DDD0004 error notification that popped up yesternight has also
disappeared. And the blank page of recent days has been replaced by the
genuine WinUpdate site. For the rest Windows Update, page once displayed,
remains as much frozen as before, refusing to search for updates. I get the
same result if I replace the URL http://v5.windowsupdate.microsoft.com by
http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr

Any ideas about how to go on from there. Thanx.

rs

rs wrote:
> rs wrote:
> > Curtis Eickerman wrote:
> >>
> >>
> >> First just go to the Microsoft windows update site and copy the
URL
> >> from the browser. It's going to be something like
> >> http://v5.windowsupdate.microsoft.com . It might be v4 for
Windows
> >> 2000, but whatever it says copy it.
> >>
> >> Then in IE select Tools/Internet Options.../Security then select
> >> "Trusted Sites" then hit the "Sites" button.
> >>
> >> Place the URL from above into the "Add this Web site to the zone:"
> >> If there is a selection that is checked that says "Requires server
> >> verification (https for all sites in this zone" un-check it.
Then
> >> select "Add".
> >>
> >
> >
> >
> > PS - After restarting Internet Explorer I obtained
> > http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr
> > as WinUpdate URL. Guess I can play around with
> > http://v5.windowsupdate.microsoft.com
> > The message about the conflict between security settings and
ActiveX
> > hampering normal display of the page however seems to indicate
where
> > the real trouble lies.
>
>
> I got some improvement once I began running
> http://windowsupdate.microsoft.com and
> http://v5.windowsupdate.microsoft.com (https://
windowsupdate.microsoft.com
> deleted) together in the Trusted Sites, Server Verification
unchecked. As a
> consequence of the five ActiveX sections three were now activated
while the
> two remaining ones moved from Blocked to Ask. (Hope this will not
open the
> system to all kinds of attacks despite firewall, antivirus and
malware
> chasers.)
>
> The logical result of these changes is that I no longer receive the
warnings
> about bad page display due to security settings fettering ActiveX
controls.
> The 0x8DDD0004 error notification that popped up yesternight has also
> disappeared. And the blank page of recent days has been replaced by
the
> genuine WinUpdate site. For the rest Windows Update, page once
displayed,
> remains as much frozen as before, refusing to search for updates. I
get the
> same result if I replace the URL
http://v5.windowsupdate.microsoft.com by
> http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr
>
> Any ideas about how to go on from there. Thanx.
>
> rs

Well, I tried this with a Windows 2000 machine versus the XP machine I
was on during my original post and here is what I see.

When you use IE to select Tools/Windows Update the URL is initially
http://windowsupdate.microsoft.com then it redirected to
http://v4.windowsupdate.microsoft.com/en/default.asp

Perhaps it would help if both were in the Trusted Zone. Also, I do not
know what controls which URL you get redirected to, but I am suspicious
that being directed to v5 when you are running Windows 2000 might be
wrong. I consistently get v5 on XP machines and v4 on this Win 2000
machine.

Curtis Eickerman

wrote:

>
> Well, I tried this with a Windows 2000 machine versus the XP machine I
> was on during my original post and here is what I see.
>
> When you use IE to select Tools/Windows Update the URL is initially
> http://windowsupdate.microsoft.com then it redirected to
> http://v4.windowsupdate.microsoft.com/en/default.asp
>
> Perhaps it would help if both were in the Trusted Zone. Also, I do
> not know what controls which URL you get redirected to, but I am
> suspicious that being directed to v5 when you are running Windows
> 2000 might be wrong. I consistently get v5 on XP machines and v4 on
> this Win 2000 machine.
>
> Curtis Eickerman

I now have both http://windowsupdate.microsoft.com and
http://v5.windowsupdate.microsoft.com in the Trusted Sites and in a test I
replaced the latter with
http://v5.windowsupdate.microsoft.co...r/default.aspx to get the
same result. All three URLs together are not accepted however.
https://windowsupdate.microsoft.com has been deleted.

Now when I call up Windows Update the site goes through three URLs before
building up:

http://windowsupdate.microsoft.com

http://v5.windowsupdate.microsoft.co...r/default.aspx

http://v5.windowsupdate.microsoft.co...ult.aspx?ln=fr

(I'm in Paris on a French language Windows XP.)

In the end unfortunately the page remains frozen although I now can use some
links, for instance download the Microsoft Baseline Security Analyzer
version 1.2.1, so I guess I may access the updates indirectly.

rs