Consider the following scenario. You use the methods that are described in the following Microsoft Knowledge Base articles to install an ActiveX control on a Microsoft Windows XP-based or Microsoft Windows Server 2003-based client computer:
How To Install Activex Control On Windows Xp
This issue occurs if the ActiveX control for the Remote Desktop Connection client is not enabled on the Web browser. By default, the ActiveX control is disabled after you install Windows XP Service Pack 3 (SP3) or Windows Small Business Server 2003 SP1.
In Windows XP Service Pack 2 (SP2), you had to install the Msrdp.ocx file to enable the Terminal Services ActiveX control. Windows XP Service Pack 3 (SP3) already includes this ActiveX control and installs it by using the Mstscax.dll file. By default, this ActiveX control is disabled in Windows XP Service Pack 3 (SP3).
If a user is logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Impact of Workaround: Applications and Web sites that require the Flash Player ActiveX control may no longer function correctly. If you implement this workaround it would affect any Flash Player ActiveX control you have installed on your system.
Add any sites that you trust not to take malicious action on your computer. Two in particular that you may want to add are "*.windowsupdate.microsoft.com" and "*.update.microsoft.com" (without the quotation marks). This is the site that will host the update, and it requires an ActiveX control to install the update.
What is the scope of the vulnerability?These are remote code execution vulnerabilities. If a user is logged on with administrative user rights, an attacker who successfully exploited any of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
ActiveX controls are not inherently unsafe when used appropriately by trusteddevelopers (such as Creative Technology, Adobe, and Apple - see examples below).Problems can occur when Internet Explorer is set to allow ActiveX controls todownload and activate from any web page (including unknown andnon-trusted sites). Some (non-trusted) web pages may contain undesirable ormalicious ActiveX controls (such as spyware or adware). To avoid accidentallydownloading undesirable ActiveX controls, it is recommended that InternetExplorer be configured to not install ActiveX controls from un-trustedsites.
As far as I know Microsoft does not offer a standalone installer for the Microsoft Update ActiveX control. To install the files yourself for 32-bit versions of Windows XP and 2003, you will need to download the needed files directly from Microsoft at the following URLs:
I think everything is installed OK. After installs a copy of my unattended DVD, If i go to Windows Update webpage trough IE (not asking for install and activex) and check for updates (Customized) there aren't any available critical updates. (wich seems OK).
The problem is when i run the vbs script (to redirect WU to MU and tells Automatic Updates to check in MU instead of WU), and go to Windows Update (automatically redirects to Microsoft Update) trough IE, it asking me to install the activex.
When you install Windows XP Service Pack 2 (SP2), Internet Explorer prompts for the installation of ActiveX controls by default. These user controls and interfaces have been improved to help prevent malicious ActiveX controls and spyware from running on customers' machines without their knowledge or consent.
When browsing the Web using Internet Explorer, some websites may require you to download or install their Active X controls in order to use or view certain types of online content. Active X controls can be installed on a case-by-case basis...
Remote Desktop Web Connection is an optional World Wide Web Service component of Internet Information Services, which is included by default in Windows XP Professional, Windows 2000 and Windows Server 2003. Just like IIS, Remote Desktop Web Connection is not installed by default on Windows XP/2003, but must be installed using Add or Remove Programs.The Remote Desktop Web Connection is an optional component of Windows XP Professional and can be installed from the Windows XP installation media.Note: Users of Windows Server 2003 do not need to download this package. They can manually add this package from Add/Remove in the Control Panel. However, if you still want to download the package please read Download Remote Desktop Web Connection for Windows Server 2003.When you install Remote Desktop Web Connection, the files are copied by default to the %systemroot%\Web\Tsweb directory of your webserver. The included sample default.htm and connect.asp page can be used as is, or you can modify them to meet the needs of your application.The Remote Desktop Web Connection is a Win32-based ActiveX control (COM object) that can be used to run Remote Desktop sessions from within Internet Explorer.The Remote Desktop Web Connection download package includes the downloadable ActiveX control and sample Web page that can be used as a starting point for running Windows-based programs inside Internet Explorer. Developers can also use the Remote Desktop Web Connection to develop client-side applications that interact with applications running on a terminal server.The downloadable ActiveX control provides most of the same functionality as the full Remote Desktop Connection software in Windows XP (read Download RDP 5.2), but is designed to deliver this functionality over the Web. The Web Package Setup program installs the downloadable ActiveX control, the ActiveX Client Control Deployment Guide, and sample Web pages on a server running Internet Information Services 4.0 or later.Remote Desktop Web Connection benefits include:
We are not experienced Windows developers, and are having difficulty understanding the installation process and security model for ActiveX controls. Obviously, this is a prerequisite to our users actually being able to run our application. :)
We are trying to determine what are the finest-grained and most restrictive set of permissions required for a typical unprivileged user (non-admin, non-power user) to install and update a particular ActiveX control (as opposed to any ActiveX control) from a signed .cab file served over HTTP as part of a web application. We need to know this for XP (SP2+) & IE6, as well as for more recent OS/browser combinations. We want this information so we can help our IT staff properly configure the machines on which the software will run.
Using the Sysinternals process monitor and some trial and error, we have been able to determine that the following registry permissions are sufficient to enable an unprivileged user to be prompted to install an ActiveX control on XP SP2 / IE6 (i.e. the user will see a the yellow bar at the top of IE saying "This site wants to install some software"):
The process of actually installing the control is much more complicated, and we haven't made much progress in sorting it out, beyond a general awareness that the user will need to write to C:\windows\downloaded program files\ and HKLM\Software\Microsoft\Code Store Database\Distribution Units\guid
(We are investigating the capability of Vista and Windows 7 to install ActiveX controls as an unprivileged user, but we need to support XP as well. We are also considering adopting AIR 2 as our platform, which provides native code integration, but that also doesn't address our immediate needs.)
ActiveX in a win or web app? In a win app, make sure yo have SP6:\\n -ag.de/sapidp/012002523100015859952009E/crxir2win_sp6.exe\\n\\nIn a web app; not as such since WIN 7 is not a server OS. Also, see the blog [Report Designer Component (RDC) in classic ASP applications on Win 2008 Server and Win 7 - Possible Solutions =/pub/wlg/18603] [original link is broken] [original link is broken] [original link is broken];.\\n\\n\\nLudek\\nFollow us on Twitter \",\"author\":\"username\":\"ludek.uher\",\"displayName\":\"Ludek Uher\",\"groupIcons\":[\"name\":\"moderator\",\"title\":\"This user is an SAP Moderator\",\"priority\":20,\"name\":\"employee\",\"title\":\"This user is an SAP Employee\",\"priority\":21],\"suspended\":false,\"isCurrentUser\":false,\"parentAuthor\":\"username\":\"former.member\",\"displayName\":\"Former Member\",\"groupIcons\":[],\"suspended\":true,\"isCurrentUser\":false,\"id\":7243182,\"creationDate\":1271709229000,\"activeRevisionId\":8490385,\"lastActivity\":1271709229000,\"parentId\":7242943,\"originalParentId\":5340061,\"likeCount\":0,\"visibility\":\"full\",\"depth\":0,\"attachments\":[],\"canVoteUpOrCancel\":false,\"relations\":\"canReport\":false,\"visibility\":\"full\",\"canEdit\":false,\"canUseDelete\":false,\"isLiked\":false,\"type\":\"comment\",\"canVoteUpOrCancel\":false,\"canConvertToAnswer\":false,\"canBeModerated\":false,\"canViewRevisions\":false,\"showInReply\":false,\"reported\":false,\"canCancelReport\":false,\"canDelete\":false,\"canVoteDownOrCancel\":false,\"canComment\":false,\"canViewReports\":false,\"isCurrentUserAuthor\":false,\"liked\":false,\"moderatorComment\":false}]}}"); const simplifiedQuestionView = JSON.parse("true"); (function() window.pageContext = mergeDeep(pageContext, question: id: 5340061, plug: "problem-installing-activex-viewer-in-windows-7", votes: 0, questionTitle: "Problem installing ActiveX viewer in Windows 7", isClosed: false, isLocked: false, isRedirected: false, redirectedFromTitle: "", redirectedFromId: "", closedStatusData: JSON.parse(""), userVoted: false, relations: JSON.parse("\"canClose\":false,\"canUnredirect\":false,\"canReport\":false,\"visibility\":\"full\",\"canEdit\":false,\"canUseDelete\":false,\"canReopen\":false,\"type\":\"question\",\"canVoteUpOrCancel\":false,\"canViewRevisions\":true,\"canUnlock\":false,\"reported\":false,\"canVoteDownOrCancel\":false,\"canLock\":false,\"canCancelReport\":false,\"canComment\":true,\"isCurrentUserAuthor\":false,\"canViewReports\":false"), isQuestionAccepted: true , childToViewInfo: id: "" , comments: JSON.parse("\"5340113\":\"rootParentId\":5340113,\"commentsCount\":5,\"comments\":[\"body\":\"ActiveX in a win or web app? In a win app, make sure yo have SP6:\\n -ag.de/sapidp/012002523100015859952009E/crxir2win_sp6.exe\\n\\nIn a web app; not as such since WIN 7 is not a server OS. Also, see the blog [Report Designer Component (RDC) in classic ASP applications on Win 2008 Server and Win 7 - Possible Solutions]"), answerPager: answersCount: 1, page: 1, pageSize: 10, pageCount: 1, sort: "votes" , answers: JSON.parse("[\"body\":\"Hi Jay,I am unsure of why it would not install. You can try to manually install the files on the client machine, from the server CAB files, however I am unsure if that will work. Other culprits may be DEP, UAC and fire wall. I know that you mentioned you are an administrator on the machine, however logging on as "Administrator" will give you elevated privileges over a user with admin-rights.Once Windows 7 is finalized and the official build is released we will have a list of products compatible with Windows 7.Trevor\",\"author\":\"username\":\"trevor.dubinsky\",\"displayName\":\"Trevor Dubinsky\",\"groupIcons\":[\"name\":\"employee\",\"title\":\"This user is an SAP Employee\",\"priority\":21],\"suspended\":false,\"isCurrentUser\":false,\"id\":5340113,\"posted\":1231798843000,\"votes\":1,\"isAccepted\":true,\"isLocked\":false,\"userVoted\":\"\",\"relations\":\"score\":1,\"canCancelAccept\":false,\"canUnlock\":false,\"canUseDelete\":false,\"accepted\":true,\"canVoteDownOrCancel\":false,\"canLock\":false,\"canAccept\":false,\"type\":\"answer\",\"canVoteUpOrCancel\":false,\"isCurrentUserAuthor\":false,\"attachments\":[]]"), answerForm: formAction: "/answers/5340061/post.json", textareaName: "body", textareaErrors: "", isAttachmentsEnabled: true, answerEditorialGuideline: title: "Before answering", content: "You should only submit an answer when you are proposing a solution to the poster\'s problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that your answer complies with our Rules of Engagement.", links: [ title: "Rules of Engagement", href: " -of-engagement.html", ] , answerMinBodyLength: '10', answerMaxBodyLength: '20000' , currentUser: sapInternalId: '', permissions: canVoteUpOrCancel: false, canVoteDownOrCancel: false, canModerate: false, , isVotedUp: false, isVotedDown: false , alerts: alertModeratorMinLength : "It should be given a proper explanation about why the content is inappropriate.", alertModeratorMinLengthValue : "10", alreadyReportedMessage : "You already have an active moderator alert for this content." , url: profileApiBaseUrl: ' -api.services.sap.com', followUnfollowQuestion: '/sap/nodeSubscription.json', isFollowingQuestion: '/sap/isFollowingNode.json', vote: voteUp: '/commands/0/voteup.json', voteDown: '/commands/0/votedown.json', cancelVote: '/commands/0/cancelvote.json' , rss: answers: '/feed/5340061/answers.rss', answersAndComments: '/feed/5340061/comments-and-answers.rss' , authorizeUploadContext: type: 'answer' , atMention: userSearchServiceUrl: ' ', currentUserName: '', useNewUSSCORS: true, atMentionDelayMs: 100, showMentionInRedactor: true , attachmentSettings: commentMaxAttachments: '2', answerMaxAttachments: '10', commentMaxAttachmentSizeBytes: '1048576', answerMaxAttachmentSizeBytes: '1048576', commentAttachmentsSizeBytesTotal: '2097152', answerAttachmentsSizeBytesTotal: '10485760' , editor: editorClipboardUploadEnabled: true ) )(); Home
Community
Ask a Question
Write a Blog Post
Login / Sign-up Search Questions and Answers 0 Former Member Jan 12, 2009 at 10:05 PM Problem installing ActiveX viewer in Windows 7 92 Views Follow RSS Feed Hello, 2ff7e9595c
Comments