UAC – ActiveX installer service
User account control is one of Vista’s interesting new security features. It offers so much more than the (for some anoying) elevation prompt when administrative privileges are required.
Many administrators disable UAC but this also disables all underlying technology:
- Mandatory Integrity Control (MIC)
- User Interface Privilege Isolation (UIPI)
- Internet Explorer protected mode
- Virtualization
- Installer Detection
and last but not least:
- ActiveX installer service
When deploying Windows XP for standard users we had to deal with the ActiveX installation issue. Some browser applications need to install an ActiveX control. Therefore the user needed either adlmin rights or call the helpdesk to apply for the ActiveX installation.
The UAC ActiveX installer service allows us to define all pre-approved ActiveX controls via GPO. This enables the user to install these controls in Standard USer mode via the installer service.
Posted: July 11th, 2007 under Microsoft, Windows Vista.