Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - ActiveX Installer Service

Reply
 
Old 08-28-2007   #1 (permalink)
Ragnar


 
 

ActiveX Installer Service

Hello

I'm testing the ActiveX Installer Service (AxIS) and I'm not getting this to
work correctly. I'm currently testing this on a Windows Vista Ultimate
computer member of an Windows Server 2003 SP2 Active Directory domain.

This is what I did:
1. Installed the ActiveX Installer Service on the Vista computer.

2. Configured to ActiveX Installer service to automatic startup and started
the service.

3. Configured a GPO for this computer, configured the "Approved Installation
Sites for ActiveX Controls" setting under \Computer Configuration\Windows
Components\ActiveX Installer Service. I added the following sites:
http://download.macromedia.com
http://fpdownload.macromedia.com
http://fpdownload2.macromedia.com

I used the value 2,2,2,0.

4. I logon with a Domain User account, open IE and navigates to a web page
where I know I will be asked for Shockwave Player.


What happens is that I get a prompt to press OK to run an ActiveX control.
Then I get the "The website wants to install the following..." on the IE
information bar. If proceed I get prompted again and then I get the UAC
prompt for credentials. (The UAC settings are default, they are not changed).

When I logon with an admin account and check the Application Log I see an
event 4097 AxInstallService with the details:
Attempt to install control
http://download.macromedia.com/pub/s...swdir8d204.cab
failed. The host URL http://download.macromedia.com is not in policy.

Of course this is incorrect as I know the URL is configured in the GPO
applied to the computer, RSOP aslo confirms that.


What is going on? Thanks!

/Ragnar

My System SpecsSystem Spec
Old 08-30-2007   #2 (permalink)
Ragnar


 
 

RE: ActiveX Installer Service

Hello - can someone (e.g. Microsoft) assist me in this matter?

Thank you!

/Ragnar


"Ragnar" wrote:
Quote:

> Hello
>
> I'm testing the ActiveX Installer Service (AxIS) and I'm not getting this to
> work correctly. I'm currently testing this on a Windows Vista Ultimate
> computer member of an Windows Server 2003 SP2 Active Directory domain.
>
> This is what I did:
> 1. Installed the ActiveX Installer Service on the Vista computer.
>
> 2. Configured to ActiveX Installer service to automatic startup and started
> the service.
>
> 3. Configured a GPO for this computer, configured the "Approved Installation
> Sites for ActiveX Controls" setting under \Computer Configuration\Windows
> Components\ActiveX Installer Service. I added the following sites:
> http://download.macromedia.com
> http://fpdownload.macromedia.com
> http://fpdownload2.macromedia.com
>
> I used the value 2,2,2,0.
>
> 4. I logon with a Domain User account, open IE and navigates to a web page
> where I know I will be asked for Shockwave Player.
>
>
> What happens is that I get a prompt to press OK to run an ActiveX control.
> Then I get the "The website wants to install the following..." on the IE
> information bar. If proceed I get prompted again and then I get the UAC
> prompt for credentials. (The UAC settings are default, they are not changed).
>
> When I logon with an admin account and check the Application Log I see an
> event 4097 AxInstallService with the details:
> Attempt to install control
> http://download.macromedia.com/pub/s...swdir8d204.cab
> failed. The host URL http://download.macromedia.com is not in policy.
>
> Of course this is incorrect as I know the URL is configured in the GPO
> applied to the computer, RSOP aslo confirms that.
>
>
> What is going on? Thanks!
>
> /Ragnar
My System SpecsSystem Spec
Old 09-05-2007   #3 (permalink)


Windows Vista!
 
 

Re: ActiveX Installer Service

Hi Ragnar -
I designed the ActiveX Installer Service. Unfortunately, the policy you're using is invalid. You can't say 2 for unsigned AX controls. I realize that the behavior for authoring policy is definitely not optimal but we were hurriedly trying to make this available at the end of Windows Vista. Here's another post that describes more of the details about how to set policy for AxIS:
http://technet2.microsoft.com/WindowsVista/f/?en/library/700f3fa8-452c-4826-bdea-e76e79bee1671033.mspx

You're welcome to send me mail about this if you have further questions.
Thanks,
Chris
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
ActiveX Installer Service - UAC disabled Vista security
ActiveX Installer Service (AxIS) problem Vista General
ActiveX Installer Service Q Vista General
ActiveX Installer Service REPOST Vista security
ActiveX Installer Service Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46