Activex install permissions

I started this thread in another posting, but have more information about the problem now, so I thought I would start it again.

I have created an intranet page available to all our machines in a windows2000 domain that requires an activex component to work properly.

Each user has a roaming profile, but is a power user on their own machine.

To get the page to work correctly, I have to change them to local admin, run the page , then change them back to power user.
We have 70 machines and I dont want to do this to every one.

How do they run the activex component while still a power user?


I have tried setting the IE security to minimum, but this doesnt work, and I have tried adding Power users to "Load and unload device drivers" in local security settings, but this also didnt work.

Any Ideas?

Thanks.

 

Take a look at technet Applying security settings through Group Policy

Especially the part
For example, a workstation that is joined to a domain will have its local security settings overridden by the domain policy wherever there is a conflict. Likewise, if the same workstation is a member of an Organizational Unit, the settings applied from the Organizational Unit's policy will override both the domain and local settings. If the workstation is a member of more than one Organizational Unit, then the Organizational Unit that immediately contains the workstation has the highest order of precedence.

 

Thanks for the info.

I had aleady found a workaround and it seems to be the Microsoft favoured way anway, although I didn't know that at the time.

I had to create an .msi file from the .cab file and load it through group policy as a user policy affecting everyone. This seemed happy to run with admin permissions and install correctly.

Thanks again.