Allow Previously Unused ActiveX Controls To Run Without Prompt
The easiest way to allow previously unused ActiveX controls to run without a prompt is to place the site in your trusted sites list. However, you will learn how to do it in a better way below.
All I ask is that you follow along.
Contents
What is ActiveX
So still, what is an ActiveX control? Can you give an example? An ActiveX control is a kind of black box that implements one or another feature. They were designed to facilitate the work of web page creators. That is, for webmasters to use ready-made solutions, instead of creating their own.
Allow Previously Unused ActiveX Controls To Run Without Prompt
As an example, It shows a calendar form added using an ActiveX control. This form is added with a single line. It is very simple to work with the calendar obtained in this way: it is a fully functional calendar that has its methods and properties. Can you imagine how long it would take for a webmaster to create such a calendar?
Another question: I heard that ActiveX controls cannot boast of security. Therefore, I would like to disable the ability to use them when browsing sites.
Well, that’s your right. Many security experts recommend doing just that. Although, in this case, you should be prepared for the fact that any of the sites that you often visit will stop showing up or lose some of its functionality.
Decision. Using Group Policies One way to prevent ActiveX objects from working is to use group policies. To do this, just use the group policies located in the ADMINISTRATIVE TEMPLATES / WINDOWS / INTERNET EXPLORER COMPONENTS / SECURITY MEANS / RESTRICTING INSTALLATION ACTIVEX ITEMS sections of the COMPUTER CONFIGURATION and USER CONFIGURATION sections. Let’s list its features.
Credit: telexper.com
* ALL PROCESS. If you enable this group policy, then all automatic requests for installing ActiveX controls will be blocked. Moreover, the blocking will occur not only in Internet Explorer but also in all other applications (except those applications for which you have enabled ActiveX installation using the group policy LIST OF PROCESSES). * INTERNET EXPLORER PROCESSES. If you enable this group policy, then all automatic requests for installing ActiveX controls will be blocked. Installation locks only for Internet Explorer.
* LIST OF PROCESSES. Using this group policy, you can specify a list of programs for which the installation of ActiveX controls will be blocked or allowed. To do this, enable this group policy, then press the SHOW button and enter the values in the following fields in the dialog that appears. * ENTER THE NAME OF THE ADDED ITEM. Specify the name of the process whose behavior you want to configure. For example, wmplayer.exe. * ENTER THE VALUE OF THE ADDED ITEM. Enter 1 to disable the automatic installation request for ActiveX objects, or 0 to allow the installation.
Decision. Using standard browser settings You can also configure the behavior of ActiveX objects using the checkboxes of the ACTIVEX ELEMENTS section and CONNECTION MODULES section of the SECURITY SETTINGS – INTERNET ZONE dialog (once again, let’s recall that this dialog can be displayed using the OTHER tab on the SECURITY tab of the BROWSE PROPERTIES dialog).
Also, all of the settings listed below can be changed using the group policies located in the ADMINISTRATIVE TEMPLATES / COMPONENTS WINDOWS / INTERNET EXPLORER / HEATER PANEL / SECURITY tab / INTERNET ZONE sections of the CONFIGURATION CONFIGURATION COMPUTER
FLAG START ACTIVEX ELEMENTS AND CONNECTION MODULES. Using this switch, you can determine whether ActiveX controls will be allowed to run automatically. You can use the following provisions of this switch.
* TURN ON. Allow ActiveX controls to run without user intervention. This value is used by default. * SUGGEST. Display a request to launch the ActiveX control if it is necessary for the loaded page to work. * DISABLE. Prevent ActiveX controls from starting without user intervention.
The checkbox allows the launch of ACTIVEX CONTROLS, WHICH WERE NOT USED EARLY, and WITHOUT WARNING. Allows you to determine whether the issue of launching ActiveX controls that were previously launched and the user agreed to launch them will be displayed. By default, this feature is disabled.
ActiveX for Internet Explorer is a special framework or plugin designed for detecting on web pages (servers) all kinds of software components, and applications created in various programming languages, and organizing their functioning in Internet Explorer.
ActiveX controls have some similarities with Java platform applets. These are the building blocks of client-server programs running in Internet Explorer, interactive scripts for playing animations and videos.
Asset X is a unique technology optimized only for IE. Installing an ActiveX control in a browser as such is not necessary, as it is part of the Windows operating system. By default, it is installed with the OS distribution.
In this article, you will learn how to enable and disable ActiveX in Internet Explorer, as well as how to filter its elements (prohibit their inclusion on web pages), and how to download and install a version of the Flash plug-in that supports Active-X web technology.
Customization of ActiveX
If the elements are not executed correctly (for example, the browser has blocked trusted resources, interactive blocks are prohibited, or IE displays a “Please configure … ActiveX�? notification), you must first configure the module:
You will see the Service section on the top of IE, click it.
Click on “Browser Properties�?.
Click on the “Security�? tab. Click the “Other�? button.
Scroll down the options list to the ActiveX Elements … section.
To safely and correctly launch items, perform the following settings:
“Automatic requests …�? – Disable (to reduce the risk of a virus attack through the use of this web technology);
“Enable filtering …�? – Enable (for selective launch, also for security purposes);
“Allow … only approved” – Enable (to activate only on trusted sites);
“Allow … which were not used�? – Disable (do not run blocks that were not used before);
“Download unsigned elements�? – Disable (also, so as not to activate dubious, potentially dangerous objects);
“Download signed elements�? – Offer (a download request is displayed).
Note. The article considers only the basic options. There are other parameters in the list for fine-tuning the functioning of ActiveX.
Attention! If you are not sure that you set the parameters correctly, you can reset the settings. To do this, in the “To level�? line, set the level of special parameters (for example, “High�?) and click “Reset�?.
Disable / enable filtering
Internet Explorer update
ActiveX element filter – blocks the launch of elements on web pages according to the rules specified in the settings.
If you do not know how to disable/enable the ActiveX filter, follow these instructions:
- Go to the “Service” section in the menu.
- Click or remove the “check mark�? in the “Filtering …�? line, respectively, to enable or disable the option.
If you want to allow the launch of elements on the current tab:
- In the address bar, click the mouse to launch the settings block – the “prohibition sign�? icon.
- In the window that opens, click “Turn off filtering …”. After refreshing the page, that part of it that has been blocked will be displayed.
Installing the Flash applet for IE
In view of the specifics of ActiveX technology for IE in Windows 7 and XP, you need to install a version of Flash adapted to the nominal version for it.
This is done as follows:
- Open the offsite – https://get.adobe.com/en/flashplayer/.
- If the settings panel did not appear in the first block, click on the link “Need a player … for another computer?�?.
- On the first line, install the version of your OS (Windows 7 ….).
- In the second line in the drop-down list, select the version – FP Internet Explorer – ActiveX.
- With a mouse click remove the checkmarks in the middle column “Additional applications�?.
- Click “Download.�?
- In the bottom panel of IE, click Run.
- Confirm the launch: click “Yes” in the “Control …” window.
Remember that the correct configuration of the Active X module reduces the risk of viruses infecting the browser and the entire computer system, and eliminates intrusive notifications about the inability to launch elements on trusted web resources.
How to run scripts of ActiveX controls marked as safe
The current setting allows you to control the interaction of scripts and ActiveX controls marked as safe for script execution. If the current setting is enabled, then interaction with the script can occur automatically without user intervention.
; Run scripts of ActiveX controls marked as safe
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“1405” = dword: 00000003
; 0 – enable
; 1 – suggest
; 3 – disable
How to download unsigned ActiveX controls
The following option allows you to control the permission to download unsigned ActiveX controls from this zone. Such code is potentially dangerous, especially if it comes from an untrusted zone. If the following option is enabled, unsigned controls will start without your intervention. If the “Suggest” option is selected, then you will receive a request to launch an unsigned control.
Download unsigned ActiveX controls
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“1004” = dword: 00000003
; 0 – enable
; 1 – suggest
; 3 – disable
How to download signed ActiveX controls
This option controls how users download signed ActiveX controls from web pages in the zone. If you enable this option, then in the future you will be able to download signed controls without user intervention. If you select the Offer option, then you will receive a request for permission to download controls signed by unreliable publishers. Code signed by trusted publishers is downloaded without request.
; Download signed ActiveX controls
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“1001” = dword: 00000003
; 0 – enable
; 1 – suggest
; 3 – disable
Running ActiveX controls and plug-ins
This setting allows you to control the launch of ActiveX controls and plug-ins on the pages of the specified zone. If this setting is enabled, then the controls and plug-ins can start without your intervention. If the “Suggest” option is selected, then you will receive a request to launch controls and plug-ins.
; Launch ActiveX elements and connection modules
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“1200” = dword: 00000003
; 0 – enable
; 1 – suggest
; 10,000 – allowed by the administrator
; 3 – disable
Using ActiveX Controls Not Marked As Safe To Use
The current setting allows you to manage ActiveX controls that are not marked as safe. If this option is enabled, ActiveX controls are executed and loaded with parameters and scripts that are not configured for safe use. This option is recommended for use only in a secure and managed area. When using this parameter, both reliable and unreliable controls are initialized and run according to the script, even though ActiveX control scripts are marked as safe. If this option is enabled or the “Suggest” option is selected, then you will receive a request to load controls with parameters or scripts. We are moving closer to how to allow Previously Unused ActiveX Controls To Run Without Prompt
Using ActiveX controls that are not marked as safe for use
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“1201” = dword: 00000003
; 0 – enable
; 1 – suggest
; 3 – disable
How to allow ActiveX without request to approved domains only
This setting determines whether ActiveX controls are requested for websites other than the website that installed the ActiveX controls. When this option is enabled, a prompt will be displayed before it is possible to launch ActiveX controls from websites in this zone. You can allow controls to be run from the currently open website or all websites.
; Allow ActiveX to be used without request only to approved domains
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings \ Zones \ 3]
“120b” = dword: 00000003
; 0 – enable
; 3 – disable
