ActiveX Install service
-
I setup a GPO with ActiveX Installer Service about two years ago. It was working great for nearly that whole time.
Starting about 2 months ago, I've noticed when I've deployed new machines I'm now being prompted for admin rights to allow the ActiveX install to happen.
And today while trying to deploy a rebuilt machine I can't get the control to install at all. It constantly prompts for install, even after I've used Admin runas privileges .
I haven't gone so far as to log in as a local admin to see if I can install it and have it stop prompting.. I'm trying avoid that.
Suggestions?
my setting is
2,2,2,0x00003300 after the domain, which is the same way I set it up 2 years ago.I noticed today that it appears that the vendor moved the file from sub.domain.com to sub1.sub.domain.com, so I've added another line in the GPO for sub1.sub.domain.com also with 2,2,2,0x00003300.
-
There are no errors in the event logs that appear related.
GPResults show that all is working as expected.
-
@Dashrender said:
And today while trying to deploy a rebuilt machine I can't get the control to install at all. It constantly prompts for install, even after I've used Admin runas privileges .
Was the original install location changed? I see this stuff usually when a .MSI was removed or moved and the new install still wants to use parts from the last one it had installed. Meaning if you are going to use GP to deploy software over the network you should make a folder for each version and keep them available else you might break things. (if the vendor lets you download instead of installing directly).
I really don't recommend GP for software installs though, they tend to break more things than they solve.
-
@Dashrender said:
There are no errors in the event logs that appear related.
GPResults show that all is working as expected.
Run the installer manually and see what happens.
-
ActiveX Install Service is a feature that allows non admins to install ActiveX controls that websites push down (normally in a cab file) where these websites have been per-approved by administration.
Our EHR has been deploying this ActiveX control since before we started using them. Originally (and still listed in their requirements) everyone had to have local admin rights so they could install this control. Using ActiveX Install Service (AXIS) I was able to approve the install of any ActiveX from their website and remove local admin rights from my users.
-
@Dashrender said:
ActiveX Install Service is a feature that allows non admins to install ActiveX controls that websites push down (normally in a cab file) where these websites have been per-approved by administration.
Yes, I know but have these already been installed on the machine before (either in another use account, or and older version). They sometimes need the older files to complete is the problem we've had with them. granted we are now dropping any companies that only support IE. Before that they had moved to Another Method as the ActiveX install service did not keep the files after install and would have issues with re-installs.
-
When IE tries to install ActiveX controls it hides a lot of the information, so it took me a while to find out that the URL of the control had changed. Adding this new URL to the approved list should have been all that was required to solve this, unfortunately it did not.
After multiple reconfigurations I still could not get it to work, so I broke down and logged in as a local admin and tried to install it. It still failed!
So I called them. They had me run IE as an admin, even though I was already logged in as an admin, and try that - it worked.
While I know that our EHR vendor doesn't support AXIS I still explained and all of a sudden a solution that I've been using for nearly two years is no longer working. She said.. "well sir, your explanation helps me understand why we've gotten an up tick in calls regarding this issue lately." We both agreed that most likely the EHR company had probably made a change (which at bare minimum I already know because the URL path included a folder named 20150622).
She is passing along this issue to the developers - let's see if we get anywhere now?
-
@Dashrender said:
AXIS
I don't think that's the proper shortening. Most people think of security cameras with that.
-
@Dashrender said:
While I know that our EHR vendor doesn't support AXIS I still explained and all of a sudden a solution
Most don't really support anything other than manual install, and configuration you do to automate it is on you.
-
@thecreativeone91 said:
@Dashrender said:
ActiveX Install Service is a feature that allows non admins to install ActiveX controls that websites push down (normally in a cab file) where these websites have been per-approved by administration.
Yes, I know but have these already been installed on the machine before (either in another use account, or and older version). They sometimes need the older files to complete is the problem we've had with them. granted we are now dropping any companies that only support IE. Before that they had moved to Another Method as the ActiveX install service did not keep the files after install and would have issues with re-installs.
Luckily we haven't had those types of issues. The ActiveX control they are installing (LibCheck.cab) has an expired certificate from 2008 (which caused it's own issues, but that's for another thread) and currently appears to be the same file.
The only time we ever get prompted to install anything is the first time we try to visit the website (and every time there after until we install the control).
This is a new install (failed HD). All of my other users are unaffected by this.
The EHR vendor is also claiming they are doing away with ActiveX controls, they've released an to allow the extra features they need to work to work with both IE and Chrome (FF is a red headed step child I guess).
-
@thecreativeone91 said:
@Dashrender said:
AXIS
I don't think that's the proper shortening. Most people think of security cameras with that.
Well it is, and it isn't.
http://blogs.technet.com/b/deploymentguys/archive/2013/06/16/enterprise-management-of-activex-controls-using-activex-installer-service.aspxI should have written AxIS
