Article ID: 280579
This article was previously published under Q280579
By design in Windows 2000, members of the Users group cannot install ActiveX controls from the Internet without modifying the rights of the group. However, some administrators may want to allow the Users group to install some ActiveX controls. This article describes how to publish a control in the Active Directory to facilitate this functionality.
Preparing the ControlThe ActiveX control must be packaged as an Installer Package (.msi) file instead of as a standard Internet Explorer cabinet (.cab) file. The .msi file can be created by using Visual Studio Installer. For the ActiveX control to be listed properly in the Active Directory, it must be set up to register through the .msi file instead of registering automatically.
To create the installation package, follow these steps:
Publishing the ControlAfter the MSI has been created, the Active Directory must be made aware of the control. The control must be added as a published control in the user portion of a policy for the appropriate Organizational Unit (OU). After the control has been published properly, you should see it in Add/Remove programs for any of the users in the OU.
After you have prepared the control and confirmed that the control can be seen in Add/Remove programs, you need to set up a registry entry in Windows 2000 that causes Internet Explorer to check the Active Directory for an installation package for the control. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
241163After the registry changes are made, Internet Explorer installs the control from the Active Directory under the permissions of the Administrator who published the control. The control is installed when the user visits a Web page that contains the control. The method that is described works based on the CLSID of the control as referenced on the Web page that hosts the control. This solution works no matter what the codebase refers to. Because most Web pages that use ActiveX controls on the Internet already have a codebase that clearly cannot be modified to point to a local installation location, this method makes controlled installation possible in the environment. No changes are necessary for the Web page itself.
(http://support.microsoft.com/kb/241163/ )How to publish ActiveX controls in Windows 2000 using IntelliMirror
To download Visual Studio Installer 1.1, visit the following Microsoft Developer Network (MSDN) Web site:
http://msdn2.microsoft.com/en-us/vstudio/aa718352.aspxFor more information about how to inspect COM components by using the TypeLib Information Object Library (TLI), visit the following MSDN Web site:
http://msdn.microsoft.com/en-us/magazine/bb985086.aspxFor more information about developing Web-based solutions for Microsoft Internet Explorer, visit the following Microsoft Web sites: