IE7 ActiveX control download problems

[Guest Tiran Irani]

I have IE7 installed on Server 2003 R2 with SP2. Users are unable to install

ActiveX controls such as flash player. The notification bar pops up stating

that the download is available, when clicked the install dialog appears. Then

the notification bar re-appears with the message "Internet explorer has

blocked this site from using an activex control in an unsafe manner" and the

control does not install (trying to install Flash player initially!). How can

I allow this to work? Is there a way to do this as administrator and make

available to users to stop users downloading any old ActiveX control?

 

Thanks in advance

[Guest TP]

Re: IE7 ActiveX control download problems

 

Hi,

 

Install the Activex controls your users need while logged on

as an admin. Normal users should not have the ability to

install Activex controls for security and stability reasons.

 

-TP

 

Tiran Irani wrote:

> I have IE7 installed on Server 2003 R2 with SP2. Users are unable to

> install ActiveX controls such as flash player. The notification bar

> pops up stating that the download is available, when clicked the

> install dialog appears. Then the notification bar re-appears with the

> message "Internet explorer has blocked this site from using an

> activex control in an unsafe manner" and the control does not install

> (trying to install Flash player initially!). How can I allow this to

> work? Is there a way to do this as administrator and make available

> to users to stop users downloading any old ActiveX control?

>

> Thanks in advance

[Guest Tiran Irani]

Re: IE7 ActiveX control download problems

 

Hi

 

I have exactly the same problem even when logged in as administrator! It has

to be related to the IE security settings in some way? I have already removed

both ‘For administrator groups’ and ‘For all other user groups’ under the

Internet Explorer Enhanced Security Configuration item in Add/Remove Programs

- System Components in Control Panel.

 

"TP" wrote:

> Hi,

>

> Install the Activex controls your users need while logged on

> as an admin. Normal users should not have the ability to

> install Activex controls for security and stability reasons.

>

> -TP

>

> Tiran Irani wrote:

> > I have IE7 installed on Server 2003 R2 with SP2. Users are unable to

> > install ActiveX controls such as flash player. The notification bar

> > pops up stating that the download is available, when clicked the

> > install dialog appears. Then the notification bar re-appears with the

> > message "Internet explorer has blocked this site from using an

> > activex control in an unsafe manner" and the control does not install

> > (trying to install Flash player initially!). How can I allow this to

> > work? Is there a way to do this as administrator and make available

> > to users to stop users downloading any old ActiveX control?

> >

> > Thanks in advance

>

[Guest TP]

Re: IE7 ActiveX control download problems

 

Hi,

 

What happens if you create a new admin account and try

installing using that? Do you have any third-party addons

installed that could be interfering with IE?

 

Do you have IE security settings configured using a group

policy object?

 

-TP

 

Tiran Irani wrote:

> Hi

>

> I have exactly the same problem even when logged in as administrator!

> It has to be related to the IE security settings in some way? I have

> already removed both ‘For administrator groups’ and ‘For all other

> user groups’ under the Internet Explorer Enhanced Security

> Configuration item in Add/Remove Programs - System Components in

> Control Panel.

[Guest Tiran Irani]

Re: IE7 ActiveX control download problems

 

Hi

 

No difference with a new admin account. I did notice though that even though

i've turned off the Internet Explorer Enhanced Security in control panel I'm

still getting the usual warning telling me that it is enabled when I try

accessing any site. Perhaps this is something to do with it?

 

This is a brand new installation, there are no addons as far as I'm aware

and there have so far been no specific group policy settings for the terminal

server! I was considering looking at the group policy settings to try

enabling ActiveX controls etc to see if that made any difference?

 

Tiran

 

"TP" wrote:

> Hi,

>

> What happens if you create a new admin account and try

> installing using that? Do you have any third-party addons

> installed that could be interfering with IE?

>

> Do you have IE security settings configured using a group

> policy object?

>

> -TP

>

> Tiran Irani wrote:

> > Hi

> >

> > I have exactly the same problem even when logged in as administrator!

> > It has to be related to the IE security settings in some way? I have

> > already removed both ‘For administrator groups’ and ‘For all other

> > user groups’ under the Internet Explorer Enhanced Security

> > Configuration item in Add/Remove Programs - System Components in

> > Control Panel.

>

>

[Guest TP]

Re: IE7 ActiveX control download problems

 

Hi Tiran,

 

It seems you are having problems with Internet Explorer

Enhanced Security (IEES). I will start out by having you

attempt to remove it for one admin account and then if

that is okay we will take care of the regular users.

 

The instructions below assume that you are not running

any anti-malware/spyware or other security software that

may interfere with Internet Explorer settings changes.

 

Please complete the following steps:

 

1. Logon as an admin account, open up regedit and change

the following values to match what is shown here (if they

are already set correct that is okay):

 

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}

 

IsInstalled REG_DWORD 0x00000000

 

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}

 

IsInstalled REG_DWORD 0x00000000

 

2. Close any open Internet Explorer instances that may be

running in your session.

 

3. Click Start-->Run and enter the following in the Open box:

 

c:\windows\system32\rundll32.exe iesetup.dll,IEHardenAdminNow

 

4. Click OK and then wait about 20 seconds. You should

not see any error or other messages while it is running.

 

5. Open up Internet Explorer, you should see a warning

message informing you that IEES is *not* enabled. Browse

to a few different websites in order to verify that IEES is in

fact not enabled (you should not get prompts about Content

being blocked by IEES)

 

Please let me know your results after completing the above

instructions. Based on your response I will type up instructions

for removing IEES from your other user accounts. For the

other accounts we may use a small script to automate some

changes.

 

Thanks.

 

-TP

 

Tiran Irani wrote:

> Hi

>

> No difference with a new admin account. I did notice though that even

> though i've turned off the Internet Explorer Enhanced Security in

> control panel I'm still getting the usual warning telling me that it

> is enabled when I try accessing any site. Perhaps this is something

> to do with it?

>

> This is a brand new installation, there are no addons as far as I'm

> aware and there have so far been no specific group policy settings

> for the terminal server! I was considering looking at the group

> policy settings to try enabling ActiveX controls etc to see if that

> made any difference?

>

> Tiran

[Guest Tiran Irani]

Re: IE7 ActiveX control download problems

 

Hi TP

 

Thanks for your extensive input - much appreciated. I have actually resolved

the particular problem I had by running a manual installation for the Flash

ActiveX player rather than trying to do it through the normal browser based

actions. It's now installed and working for the users.

 

It's possible I may encounter a similar problem with future additions but I

need to let the users settle down with the system before further activity.

 

I'll post again if I get stuck.

 

Thanks

Tiran

 

"TP" wrote:

> Hi Tiran,

>

> It seems you are having problems with Internet Explorer

> Enhanced Security (IEES). I will start out by having you

> attempt to remove it for one admin account and then if

> that is okay we will take care of the regular users.

>

> The instructions below assume that you are not running

> any anti-malware/spyware or other security software that

> may interfere with Internet Explorer settings changes.

>

> Please complete the following steps:

>

> 1. Logon as an admin account, open up regedit and change

> the following values to match what is shown here (if they

> are already set correct that is okay):

>

> HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}

>

> IsInstalled REG_DWORD 0x00000000

>

> HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}

>

> IsInstalled REG_DWORD 0x00000000

>

> 2. Close any open Internet Explorer instances that may be

> running in your session.

>

> 3. Click Start-->Run and enter the following in the Open box:

>

> c:\windows\system32\rundll32.exe iesetup.dll,IEHardenAdminNow

>

> 4. Click OK and then wait about 20 seconds. You should

> not see any error or other messages while it is running.

>

> 5. Open up Internet Explorer, you should see a warning

> message informing you that IEES is *not* enabled. Browse

> to a few different websites in order to verify that IEES is in

> fact not enabled (you should not get prompts about Content

> being blocked by IEES)

>

> Please let me know your results after completing the above

> instructions. Based on your response I will type up instructions

> for removing IEES from your other user accounts. For the

> other accounts we may use a small script to automate some

> changes.

>

> Thanks.

>

> -TP

>

> Tiran Irani wrote:

> > Hi

> >

> > No difference with a new admin account. I did notice though that even

> > though i've turned off the Internet Explorer Enhanced Security in

> > control panel I'm still getting the usual warning telling me that it

> > is enabled when I try accessing any site. Perhaps this is something

> > to do with it?

> >

> > This is a brand new installation, there are no addons as far as I'm

> > aware and there have so far been no specific group policy settings

> > for the terminal server! I was considering looking at the group

> > policy settings to try enabling ActiveX controls etc to see if that

> > made any difference?

> >

> > Tiran

>