none
ActiveX Installer Service not working

    Question

  • Hi there

    I have an internal web-based application that requires an ActiveX control. None of my users have administrative access over their workstations, thus when they reach the application and attempt to use the element of code relying on the ActiveX control they get an error - it's not installed and they do not have permission to install it.

    I came across a Group Policy setting known as the "ActiveX Installer Service". Here, you can control the installation of ActiveX components determined by their site. For example, I have navigated through Computer Configuration-> Administrative Templates -> Windows Components -> ActiveX Installer Service and defined the following:

    Setting: Approved Installation Sites for ActiveX Controls

       State: Enabled

       Host URLs: http://server.domain.local

       Value: 2,2,1,0

    Setting: ActiveX installation policy for sites in Trusted zones

       Installation Policy for ActiveX control signed by trusted publisher: Silently install

       Installation Policy for signed ActiveX control: Silently install

       Installation Policy for unsigned ActiveX control: Prompt the user

       Permit connection to trusted sites with the following server certificate errors: Unknown certificate authority (CA); Invalid certificate name (CN); Expired certificate validation date; Wrong certificate usage

    When I first implemented this, it worked a treat. For users who already have the control installed there is no problem. Any new user who has not yet had the control launches the application and they get the same permission-based error as in the past, before I implemented the Group Policy setting. The error is custom from the ActiveX control, so there is no help from Group Policy.

    I have run a result set of policy on the affected user's workstation and it tells me that the setting is in place, however, something is not quite right, as it's clearly not doing what it is supposed to.

    Does anyone have thoughts on how I might proceed?

    Regards

    Christian

    Wednesday, September 23, 2015 6:28 PM

Answers

  • Progress has been made. I went through Event Viewer and saw a source "AxInstallerService" which failed on the download of the control. When I browsed to the .cab file in the error (Failed to download control http://server.domain.local/itp/app/newsample/support/ITPOLSActiveX3.cab from host URL http://server.domain.local) I was being prompted for credentials. Once I fixed that (permission in IIS) I was able to download the control. This did work in the past; I don't know why it started only now, but this was the fix.
    • Marked as answer by Christian17073 Wednesday, September 23, 2015 8:21 PM
    Wednesday, September 23, 2015 8:21 PM

All replies

  • I have just discovered the ActiveX Installer service logs activity in Event Viewer (of course I thought I knew what I was looking for in there before!) and can see the following:

    20:02

    The ActiveX control http://server.domain.local/itp/app/newsample/support/ITPOLSActiveX3.cab from host URL http://server.local passed all policy checks.

    19:59

    Failed to download control http://server.domain.local/itp/app/newsample/support/ITPOLSActiveX3.cab from host URL http://server.local

    Wednesday, September 23, 2015 7:22 PM
  • Progress has been made. I went through Event Viewer and saw a source "AxInstallerService" which failed on the download of the control. When I browsed to the .cab file in the error (Failed to download control http://server.domain.local/itp/app/newsample/support/ITPOLSActiveX3.cab from host URL http://server.domain.local) I was being prompted for credentials. Once I fixed that (permission in IIS) I was able to download the control. This did work in the past; I don't know why it started only now, but this was the fix.
    • Marked as answer by Christian17073 Wednesday, September 23, 2015 8:21 PM
    Wednesday, September 23, 2015 8:21 PM