I have a question about loading Act 1

[ahoodin7]

I have a question about loading ActiveX Controls with ASP Classic.
The problem is that typically these controls are loaded from the server.
IT has locked out all Administrative rights on Workstations, so ActiveX
controls can not be loaded from remote servers without changes to group
policies which they do not care to make.

Here is the method the app loads the controls

<object ID="oPersonalInbox" 
      CLASSID="CLSID:0006F063-0000-0000-C000-000000000046" 
      CODEBASE="Graph/outlctlx.CAB#ver=9,0,0,3203"
      HEIGHT="100%"
      WIDTH="100%">
...
    </object>

This loads the control from the server. Now they are trying
to package the controls and deploy them locally on the client
side machine by copying them to a system directory and
registering them with regsvr32. If the path is removed, will
the control load from the client's local system directory?

<object ID="oPersonalInbox" 
      CLASSID="CLSID:0006F063-0000-0000-C000-000000000046" 
      CODEBASE="outlctlx.CAB#ver=9,0,0,3203"
      HEIGHT="100%"
      WIDTH="100%">
...
    </object>

 

[MarkSweetland]

The control will be loaded from the client's machine first. But if the version of the control on the client machine is less than the version number listed in the CODEBASE line, then the client will attempt to download and install the version on the server from the location specified in the CODEBASE (location where the CAB file exists on the server). If the CAB file is being removed from the server, I would remove the CODEBASE line in the OBJECT declaration.


Mark

"You guys pair up in groups of three, then line up in a circle."
- Bill Peterson, a Florida State football coach

 

[ahoodin7]

Mark, the CODEBASE parameter appears to tell the browser
which control to load, so I am thinking that removing
this line will break the functionality. Is this not correct?
What will allow the Browser to load the control?

CODEBASE="outlctlx.CAB#ver=9,0,0,3203"

The object will not be removed from the server.
The problem is that the new Windows 7 and Windows 8 machines
are locked down on the client side.

IT does not want to fix the group policy they want to
install the controls to the local Windows 7 / 8 machines.

How do I load a 3rd party control local instead of from the
server?

PS: A working solution would be to add the server to the trusted
sites, and to allow the client to load an unsigned control.
Also to update the group policy to let the clients load
ActiveX controls.

 

[MarkSweetland]

The CLASSID is the item that tells the browser what control to load per the client's registry. The CODEBASE tells the browser where to get the control install file (.CAB) in the event the control is not on the client machine, or the version on the client machine is less than the version as stated in the #Version attribute.

If IT is installing/regeistering the controls on the clients then the object will work without the CODEBASE. You can leave it in, just that Clients without the control registered will be prompted to download and install the control from the .CAB file, and in the case of a locked down machine, will probably require elevated permissions.

If the site is identified as a Trusted Site and the Custom Level (security tab) is set to Allow the user's to install Active-X controls, then that will allow the install from the server .CAB file, including thrid party controls.









Mark

"You guys pair up in groups of three, then line up in a circle."
- Bill Peterson, a Florida State football coach

 

[ahoodin7]

Mark,

Thanks! Yes it loads without the CodeBase. Ok I will pull
that line out.

The problem is that each location has its own sites.

They need to be identified as trusted sites, which is easy enough
and so is raising the security level.

The problem is the group policy, that IT sets. They would
have to setup a group policy for each location with its own trusted server,
and special settings. They object to that I guess.

So they are going ahead and packaging the objects, and I have not
seen the objects load yet.

"I hope this works."

 

[MarkSweetland]

You'll only need the trusted site if you want the client to be able to download and install the Active-X control themselves. If the control is already installed on each client, the group policy for trusted sites is not needed.


Mark

"You guys pair up in groups of three, then line up in a circle."
- Bill Peterson, a Florida State football coach