new intranet deployment requires activeX enabled

[david902]

We've paid someone to develop a new intranet web application the requires the use of ActiveX controls,

we've been directed to put the intranet domain into the trusted sites security section and enable all the ActiveX controls as a custom security setting

my research show this is a user level issue and cannot be fixed globally, we have people (day/night shifts) that share computers, also people that move around desk to desk frequently.

other than going around to every computer while every user is logged on and making the security adjustments in the local browser, I need a solution for over 500 users.
no man power to accomplish task in a timely fashion.

the vendor told us that if we change the settings under the administrator account it will propigate, hogwash, don't work

my reasearch shows two possible solutions, both of which are not best of breed.

create a custom .inf file and load the new settings for each user via the registry,

other,

deploy the IEAK, Internet Explorer Administration Kit and
package up a new installation with the required settings and reinstalling IE everywhere.

yuk!

I'm sure others may have had an issue like this, any ideas of a simpler solution would be of much help

tia

 

[Marcs41]

Check for and extract from a modified PC:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2

That should be the trusted zones

Copy that to another PC to test, ( make backup! )

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\SO\ACTIVE_CONTENT

Give it a try If the solution is here, let us know it was helpful so others can benefit from it as too

 

[david902]

nope, not a solution. those are the activex control keys, but restoring sets the to the default levels.

 

[Marcs41]

Is the zone 2 in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
not your trusted zones?

What you could try is to take 1 PC to be modified, install a registry change tracker and make the modifications.
Then you can see exactly what keys get modified and extract thos into .reg files which you can distribute. If the solution is here, let us know it was helpful so others can benefit from it as too

 

[david902]

IEAK seems to be the easiest/best solution withour having to visit 500+ machines to regedit, although the registration could be done via a script,

the IEAK allows a custom configuration to overwrite a previously installed ie6.0 sp1 installation,

no fuss, no muss, and the creation of the installation package is mostly clickicking or unclicking settings to be included in the package.

since these folks are standard users w/o internet access, I was also able to turn off _alot_ of their browser functionality to don't need to access the intranet.