IE6 SP1 Can't Install an ActiveX Control Under Regular User

[jimhill10]

I cannot install an ActiveX control under a regular domain user profile no matter what I do with the security settings. This problem requires me to provide the user with local administrative access the first time that they visit the page in order to correctly install and register the ActiveX control.

Is there any other way around this? By delegating the users temporary (or permanent) local admin access I am forced to violate some companies security policy. Also this kind of detracts from the whole idea of having a thin-client application running through IE6 anyway. There are ways from within the IEAK utility to add specific access to certain named ActiveX controls, but this has the effect of requiring all controls be named added through the IEAK process.

Your help is greatly appreciated. My goal would be to find a way to provide appropriate access to %windir%\downloaded program files and any associated registry keys for all of the low level user profiles. This application has the CAB file creating a DLL in system32.

Thanks!

 

[jimhill10]

PS- This happens on IE6 SP1 machines running both Windows 2000 and XP. I have not confirmed that the problem is limited to the NTFS disk operating system but there is where I have seen most of the issues.

When I visit the web page with the ActiveX in it, all I get is a blank screen and no download occurs. If I go in as local admin all is well and I get the dialogue box for me to approve the installation.