To automatically download and install ActiveX controls

Discussion in 'Server Security' started by Spin, Nov 11, 2005.

  1. Spin

    Spin Guest

    The ability to automatically download and install ActiveX controls means one
    has to set their browser to either "Low Security", or they need to
    "Customize" their current security level to allow to download and install
    ActiveX controls, or add the site to their IE Trusted Sites list. Do I
    understand this correctly?
     
    Spin, Nov 11, 2005
    #1
    1. Advertisements

  2. Yes, but is a security risk to do it that way. In IE7 there won't be any
    automatic ActiveX installation permitted for that reason. It is better to
    be notified about such installations.
     
    Colin Barnhorst, Nov 12, 2005
    #2
    1. Advertisements

  3. Spin

    Spin Guest

    ActiveX is a security risk period. I am interested in how people manage
    allowing ActiveX in IE their environments.

    --
    Spin

     
    Spin, Nov 12, 2005
    #3
  4. I have had no trouble allowing ActiveX. Of course, I'm careful where I go.

    --
    Frank Saunders, MS-MVP OE
    Please respond in Newsgroup. Do not send email
    http://www.fjsmjs.com
    Protect your PC
    http://www.microsoft.com/security/protect/
     
    Frank Saunders, MS-MVP OE, Nov 12, 2005
    #4

  5. Set IE to prompt for installation, of course, and don't allow users to
    run under elevated privileges, so that even if they click <Yes> nothing
    happens without a knowledgeable technician checking the safety of the
    control.


    --

    Bruce Chambers

    Help us help you:
    http://dts-l.org/goodpost.htm
    http://www.catb.org/~esr/faqs/smart-questions.html

    You can have peace. Or you can have freedom. Don't ever count on having
    both at once. - RAH
     
    Bruce Chambers, Nov 12, 2005
    #5
  6. Spin

    Spin Guest

    Do you manage allowing it through group policy or do so on a individualized
    machine basis?
     
    Spin, Nov 12, 2005
    #6
  7. Frank Saunders, MS-MVP OE, Nov 12, 2005
    #7

  8. Allowing is done on an individual basis, provided that access to the
    web site is required for the performance of the user's duties.


    --

    Bruce Chambers

    Help us help you:
    http://dts-l.org/goodpost.htm
    http://www.catb.org/~esr/faqs/smart-questions.html

    You can have peace. Or you can have freedom. Don't ever count on having
    both at once. - RAH
     
    Bruce Chambers, Nov 12, 2005
    #8
  9. Spin

    Spin Guest

    Oh that's right, I believe you have to be an administrator of a machine to
    allow the installation of an ActiveX control.
     
    Spin, Nov 12, 2005
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.