IE7 ActiveX control download problems

  • Thread starter Thread starter Tiran Irani
  • Start date Start date
T

Tiran Irani

Guest
I have IE7 installed on Server 2003 R2 with SP2. Users are unable to install
ActiveX controls such as flash player. The notification bar pops up stating
that the download is available, when clicked the install dialog appears. Then
the notification bar re-appears with the message "Internet explorer has
blocked this site from using an activex control in an unsafe manner" and the
control does not install (trying to install Flash player initially!). How can
I allow this to work? Is there a way to do this as administrator and make
available to users to stop users downloading any old ActiveX control?

Thanks in advance
 
Re: IE7 ActiveX control download problems

Hi,

Install the Activex controls your users need while logged on
as an admin. Normal users should not have the ability to
install Activex controls for security and stability reasons.

-TP

Tiran Irani wrote:
> I have IE7 installed on Server 2003 R2 with SP2. Users are unable to
> install ActiveX controls such as flash player. The notification bar
> pops up stating that the download is available, when clicked the
> install dialog appears. Then the notification bar re-appears with the
> message "Internet explorer has blocked this site from using an
> activex control in an unsafe manner" and the control does not install
> (trying to install Flash player initially!). How can I allow this to
> work? Is there a way to do this as administrator and make available
> to users to stop users downloading any old ActiveX control?
>
> Thanks in advance
 
Re: IE7 ActiveX control download problems

Hi

I have exactly the same problem even when logged in as administrator! It has
to be related to the IE security settings in some way? I have already removed
both ‘For administrator groups’ and ‘For all other user groups’ under the
Internet Explorer Enhanced Security Configuration item in Add/Remove Programs
- System Components in Control Panel.

"TP" wrote:

> Hi,
>
> Install the Activex controls your users need while logged on
> as an admin. Normal users should not have the ability to
> install Activex controls for security and stability reasons.
>
> -TP
>
> Tiran Irani wrote:
> > I have IE7 installed on Server 2003 R2 with SP2. Users are unable to
> > install ActiveX controls such as flash player. The notification bar
> > pops up stating that the download is available, when clicked the
> > install dialog appears. Then the notification bar re-appears with the
> > message "Internet explorer has blocked this site from using an
> > activex control in an unsafe manner" and the control does not install
> > (trying to install Flash player initially!). How can I allow this to
> > work? Is there a way to do this as administrator and make available
> > to users to stop users downloading any old ActiveX control?
> >
> > Thanks in advance
>
 
Re: IE7 ActiveX control download problems

Hi,

What happens if you create a new admin account and try
installing using that? Do you have any third-party addons
installed that could be interfering with IE?

Do you have IE security settings configured using a group
policy object?

-TP

Tiran Irani wrote:
> Hi
>
> I have exactly the same problem even when logged in as administrator!
> It has to be related to the IE security settings in some way? I have
> already removed both ‘For administrator groups’ and ‘For all other
> user groups’ under the Internet Explorer Enhanced Security
> Configuration item in Add/Remove Programs - System Components in
> Control Panel.
 
Re: IE7 ActiveX control download problems

Hi

No difference with a new admin account. I did notice though that even though
i've turned off the Internet Explorer Enhanced Security in control panel I'm
still getting the usual warning telling me that it is enabled when I try
accessing any site. Perhaps this is something to do with it?

This is a brand new installation, there are no addons as far as I'm aware
and there have so far been no specific group policy settings for the terminal
server! I was considering looking at the group policy settings to try
enabling ActiveX controls etc to see if that made any difference?

Tiran

"TP" wrote:

> Hi,
>
> What happens if you create a new admin account and try
> installing using that? Do you have any third-party addons
> installed that could be interfering with IE?
>
> Do you have IE security settings configured using a group
> policy object?
>
> -TP
>
> Tiran Irani wrote:
> > Hi
> >
> > I have exactly the same problem even when logged in as administrator!
> > It has to be related to the IE security settings in some way? I have
> > already removed both ‘For administrator groups’ and ‘For all other
> > user groups’ under the Internet Explorer Enhanced Security
> > Configuration item in Add/Remove Programs - System Components in
> > Control Panel.
>
>
 
Re: IE7 ActiveX control download problems

Hi Tiran,

It seems you are having problems with Internet Explorer
Enhanced Security (IEES). I will start out by having you
attempt to remove it for one admin account and then if
that is okay we will take care of the regular users.

The instructions below assume that you are not running
any anti-malware/spyware or other security software that
may interfere with Internet Explorer settings changes.

Please complete the following steps:

1. Logon as an admin account, open up regedit and change
the following values to match what is shown here (if they
are already set correct that is okay):

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}

IsInstalled REG_DWORD 0x00000000

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}

IsInstalled REG_DWORD 0x00000000

2. Close any open Internet Explorer instances that may be
running in your session.

3. Click Start-->Run and enter the following in the Open box:

c:\windows\system32\rundll32.exe iesetup.dll,IEHardenAdminNow

4. Click OK and then wait about 20 seconds. You should
not see any error or other messages while it is running.

5. Open up Internet Explorer, you should see a warning
message informing you that IEES is *not* enabled. Browse
to a few different websites in order to verify that IEES is in
fact not enabled (you should not get prompts about Content
being blocked by IEES)

Please let me know your results after completing the above
instructions. Based on your response I will type up instructions
for removing IEES from your other user accounts. For the
other accounts we may use a small script to automate some
changes.

Thanks.

-TP

Tiran Irani wrote:
> Hi
>
> No difference with a new admin account. I did notice though that even
> though i've turned off the Internet Explorer Enhanced Security in
> control panel I'm still getting the usual warning telling me that it
> is enabled when I try accessing any site. Perhaps this is something
> to do with it?
>
> This is a brand new installation, there are no addons as far as I'm
> aware and there have so far been no specific group policy settings
> for the terminal server! I was considering looking at the group
> policy settings to try enabling ActiveX controls etc to see if that
> made any difference?
>
> Tiran
 
Re: IE7 ActiveX control download problems

Hi TP

Thanks for your extensive input - much appreciated. I have actually resolved
the particular problem I had by running a manual installation for the Flash
ActiveX player rather than trying to do it through the normal browser based
actions. It's now installed and working for the users.

It's possible I may encounter a similar problem with future additions but I
need to let the users settle down with the system before further activity.

I'll post again if I get stuck.

Thanks
Tiran

"TP" wrote:

> Hi Tiran,
>
> It seems you are having problems with Internet Explorer
> Enhanced Security (IEES). I will start out by having you
> attempt to remove it for one admin account and then if
> that is okay we will take care of the regular users.
>
> The instructions below assume that you are not running
> any anti-malware/spyware or other security software that
> may interfere with Internet Explorer settings changes.
>
> Please complete the following steps:
>
> 1. Logon as an admin account, open up regedit and change
> the following values to match what is shown here (if they
> are already set correct that is okay):
>
> HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}
>
> IsInstalled REG_DWORD 0x00000000
>
> HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}
>
> IsInstalled REG_DWORD 0x00000000
>
> 2. Close any open Internet Explorer instances that may be
> running in your session.
>
> 3. Click Start-->Run and enter the following in the Open box:
>
> c:\windows\system32\rundll32.exe iesetup.dll,IEHardenAdminNow
>
> 4. Click OK and then wait about 20 seconds. You should
> not see any error or other messages while it is running.
>
> 5. Open up Internet Explorer, you should see a warning
> message informing you that IEES is *not* enabled. Browse
> to a few different websites in order to verify that IEES is in
> fact not enabled (you should not get prompts about Content
> being blocked by IEES)
>
> Please let me know your results after completing the above
> instructions. Based on your response I will type up instructions
> for removing IEES from your other user accounts. For the
> other accounts we may use a small script to automate some
> changes.
>
> Thanks.
>
> -TP
>
> Tiran Irani wrote:
> > Hi
> >
> > No difference with a new admin account. I did notice though that even
> > though i've turned off the Internet Explorer Enhanced Security in
> > control panel I'm still getting the usual warning telling me that it
> > is enabled when I try accessing any site. Perhaps this is something
> > to do with it?
> >
> > This is a brand new installation, there are no addons as far as I'm
> > aware and there have so far been no specific group policy settings
> > for the terminal server! I was considering looking at the group
> > policy settings to try enabling ActiveX controls etc to see if that
> > made any difference?
> >
> > Tiran
>
 
Back
Top