changing activex controls? - KiXtart.org

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » changing activex controls?

Page 1 of 1

Topic Options

#144604 - 2005-08-02 01:25 AM changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	anyone know how to change activex controls with a script? ( internet options,security,internet/intranet.)
Top

#144605 - 2005-08-02 03:38 AM Re: changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	let me rephrase that, how do i change internet explorer security options with a script?
Top

#144606 - 2005-08-02 03:46 AM

Re: changing activex controls?

Shawn

Administrator

Registered: 1999-08-13
Posts: 8611

I (we) wrote some custom policy templates for this. You can either use these templates with GPO's ... or use the Kixtart WriteValue registry function to poke them directly ... here's the template for the USER INTRANET zone. To poke the INTERNET zone, just change the key as detailed below. If you need assistance using WriteValue, don't hesitate to ask.

Intranet
KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1"

Internet
KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3"

Code:


 CATEGORY "Internet Explorer"

  CATEGORY "Zone Settings"
  CATEGORY "Intranet Zone"

  KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1"

  POLICY "Run components not signed with Authenticode"
  VALUENAME "2004"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Run components signed with Authenticode"
  VALUENAME "2001"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Download signed ActiveX controls"
  VALUENAME "1001"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Download unsigned ActiveX controls"
  VALUENAME "1004"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Initialize and script ActiveX controls not marked as safe"
  VALUENAME "1201"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Run ActiveX controls and plugins"
  VALUENAME "1200"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Script ActiveX controls marked safe for scripting"
  VALUENAME "1405"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "File download"
  VALUENAME "1803"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Font download"
  VALUENAME "1604"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Microsoft VM Java permissions"
  PART "Java permissions" DROPDOWNLIST 
  VALUENAME "1C00"
  ITEMLIST
   NAME "Medium safety" VALUE NUMERIC 131072
   NAME "Low safety" VALUE NUMERIC 196608
   NAME "High safety" VALUE NUMERIC 65536
   NAME "Disable Java" VALUE NUMERIC 0
   ; NAME "Custom" VALUE NUMERIC 8388608
  END ITEMLIST
  END PART
  END POLICY

  POLICY "Access data sources across domains"
  VALUENAME "1406"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Allow META REFRESH"
  VALUENAME "1608"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Display mixed content"
  VALUENAME "1609"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Don't prompt for client certificate selection when no certificate exists"
  VALUENAME "1A04"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Drag and drop or copy and paste files"
  VALUENAME "1802"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Installation of desktop items"
  VALUENAME "1800"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Launching applications and files in an IFRAME"
  VALUENAME "1804"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Navigate sub-frames accross different domains"
  VALUENAME "1607"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Software channel permissions"
  PART "Channel permissions" DROPDOWNLIST 
  VALUENAME "1E05"
  ITEMLIST
   NAME "Medium safety" VALUE NUMERIC 131072
   NAME "Low safety" VALUE NUMERIC 196608
   NAME "High safety" VALUE NUMERIC 65536
  END ITEMLIST
  END PART
  END POLICY

  POLICY "Submit non-encrypted form data"
  VALUENAME "1601"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Userdata persistence"
  VALUENAME "1606"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Active scripting"
  VALUENAME "1400"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Allow paste operations via script"
  VALUENAME "1407"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "Scripting of Java applets"
  VALUENAME "1402"
  VALUEOFF NUMERIC 3
  VALUEON NUMERIC 0
  END POLICY

  POLICY "User Authentication"
  PART "Security setting" DROPDOWNLIST 
  VALUENAME "1A00"
  ITEMLIST
   NAME "Automatic logon with current Username and Password" VALUE NUMERIC 0
   NAME "Automatic logon only in Intranet Zone" VALUE NUMERIC 131072
   NAME "Prompt for Username and Password" VALUE NUMERIC 65536
   NAME "Anonymous logon" VALUE NUMERIC 196608
  END ITEMLIST
  END PART
  END POLICY

  END CATEGORY ; Intranet Zone

Top

#144607 - 2005-08-02 05:01 AM Re: changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	yea,i was doing the direct thing with kix, i didnt know about the template, thanks.. im tring to make this work for all users though, its only working for administrator, or who ever is currently signed onto the terminal. i want to change the registry for all users...
Top

#144608 - 2005-08-02 10:26 AM Re: changing activex controls?
Mart Mart KiX Supporter Registered: 2002-03-27 Posts: 4673 Loc: The Netherlands	Then you would have to use GPO or give your users permissions to the keys because they are protected for change by regular users. So the changes will get done with admin privs but not with user privs. A start-up script GPO is also an option. _________________________ Mart - Chuck Norris once sold ebay to ebay on ebay.
Top

#144609 - 2005-08-02 03:34 PM Re: changing activex controls?
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Quote: A start-up script GPO is also an option. Now that would be a bit of a challenge to modify the users hives! If you can do a GPO startup script, then why not just use GPO directly to deploy the policy? I don't get why Shawn said he needed custom ADM templates. The standard GPO templates allow for the "Import" of Security zone settings. I know cuz I use them. I also self-sign certs and use a GPO to push out myself as a root cert authority. I dislike seeing policy reg hacks in KiX. First off, that is what GPOs are for. Second, users can read through the script and figure out the reg hacks and reverse them. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#144610 - 2005-08-02 03:41 PM Re: changing activex controls?
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	Les ... we use custom templates because I can't stand that "funky feature" of GPO's - you know - the one where you import a "blob" of IE settings ... the whole concept made me very uncomfortable. Especially down the road where changes are required - These templates give us better visibility of settings, and control, and hopefully consistency and less errors (missed settings) day two.
Top

#144611 - 2005-08-03 01:38 AM Re: changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	im trying to change the registry settings for a certain user without having to sign the user on first. right now, i only know how to change the registry for machine, and current user, so i guess there is no other choice? id like to use a script, not a gpo. is there a way to log a user on with a script, if this is the only choice i have,other than gpo? right now i have to go to every machine, log the user in, and then change registry, that takes too much time. there has to be a way through kix...
Top

#144612 - 2005-08-04 12:06 AM Re: changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	anyone?
Top

#144613 - 2005-08-04 12:25 AM Re: changing activex controls?
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	I said, "Now that would be a bit of a challenge to modify the users hives!" for a reason. The reason being that the user's hive is not loaded so you would have to load it first. If you choose to make it difficult for yourself, then the job is yours. Why not use a GPO? _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#144614 - 2005-08-04 01:36 AM Re: changing activex controls?
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	Quote: im trying to change the registry settings for a certain user without having to sign the user on first. Having some trouble understanding this one. Why do it before they log in ?
Top

#144615 - 2005-08-05 08:36 AM Re: changing activex controls?
oscar oscar Fresh Scripter Registered: 2005-07-28 Posts: 17	the users use the terminals at random. They all log in under the same screen name, same pass.i could go to every station and log on that particular user name, but it would take to long. so im either trying to figure out a way to logon 20 stations at the same time, or edit that users hive without having to log them on. better?
Top

#144616 - 2005-08-05 03:56 PM Re: changing activex controls?
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	You still didn't say why you don't use a GPO. I mean, they are sooo easy! You should be able to do it as reg hacks in the users logon script. {yuck} Still, if you want to do it the hard way {YUCK}, you can start by looking up LoadHive() in the manual. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#144617 - 2005-08-05 05:19 PM Re: changing activex controls?
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	Ja I could see that working nicely. Write a script that uses LoadHive to load the user's ntuser.dat file into HKEY_USERS, give the loaded hive a standard root keyname (like "tempuser") then in the script, poke the values you want into the loaded hive (it would know how to find it cause you gave it a std name), then simply unload the hive. Just make extra sure the hive is unloaded properly else caos will insue.
Top

Page 1 of 1

Previous Topic View All Topics

Index Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Search the board with:
superb Board Search
or try with google:

	Web kixtart.org