Neil,

I will be saving this one because I think it'll be important in the future.
However, what I was really talking about was the ActiveX control that the
TSWEB web page wants the user to install on their computer to allow the
Connect button to work.  I was trying to see if there was a GPO way of
installing it without myself or my assistant having to go around to all the
PC's and install it under Administrator.  Perhaps there's an MSI version of
said application that I might be able to assign?

Thanks,

Matt

-----Original Message-----
From: Braebaum, Neil [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 28, 2003 6:15 AM
To: NT 2000 Discussions
Subject: RE: Allow installation of certain Activex controls


> Subject: Allow installation of certain Activex controls
> From: Matt Hoffman <[EMAIL PROTECTED]>
> Date: Wed, 27 Aug 2003 09:37:31 -0400
> 
> Does anyone know of a way to specify certain activex controls
> as being ok for a user to install? Perhaps a GPO setting?  
> This is specifically referencing the activex control for the 
> 2003 Terminal Services web client.

For terminal server users I pre-empt this (my terminal server users, all use
mandatory profiles, and a very restrictive desktop).

The ActiveX control I need to deploy, is part of a LOB application.

It's digitally signed, so what I do (as I use mandatory profiles) is
pre-create the certificate in the users registry (write a value to the
registry in the login script).

I've also, pre-loaded the ActiveX control on the terminal server, and
pointed the paths in HKCR to generic paths that will actually be in the
users home directories. (to set this up, you need to alter ActiveX cache
paths in the registry, before you run the ActiveX control as a user with
admin rights, so the HKCR stuff can get created (a normal user wouldn't be
able to do this))

As part of the login script, I copy the ActiveX control files, to this
generic path under the users home directory.

The upshot is, user cannot download and install any ActiveX control, but I
pre-empt the business one I want them to use - so when they access it, it's
already there.

Neil

***********************************************
This e-mail and its attachments are confidential
and are intended for the above named recipient
only. If this has come to you in error, please 
notify the sender immediately and delete this 
e-mail from your system.
You must take no action based on this, nor must 
you copy or disclose it or any part of its contents 
to any person or organisation.
Statements and opinions contained in this email may 
not necessarily represent those of Littlewoods.
Please note that e-mail communications may be monitored.
The registered office of Littlewoods Limited and its subsidiaries is 100 Old
Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is
262152.
************************************************


------
You are subscribed as [EMAIL PROTECTED]
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&lang=e
nglish
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to