To make Internet Explorer (IE) only able to run certain ActiveX controls, run
regedit and modify the following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\AllowedControls. Add an entry for the CLSID of each control that you
want to allow. Make the data type DWORD, and to allow the control to run in IE,
set the value to zero.
Some common CLSIDs:
-
{D27CDB6E-AE6D-11CF-96B8-444553540000} Flash
-
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} MediaPlayer
-
{06DD38D3-D187-11CF-A80D-00C04FD74AD8} Plug-ins, including Acrobat Reader
-
{CA8A9780-280D-11CF-A24D-444553540000} Acrobat Reader
-
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} Real Player
-
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} QuickTime
-
{166B1BCA-3F9C-11CF-8075-444553540000} ShockWave
You can View Source on a page, the look for the <object> or <applet>
tags to find the CLSID of some other control.
Then go into IE Tools Internet Options dialog and set the security settings for
the various zones Run ActiveX and Plugins property to Administrator Approved.
Only the controls that have a value of zero in the registry will be able to
run.
|