home *** CD-ROM | disk | FTP | other *** search
- <?xml version="1.0" encoding="utf-8"?>
- <!-- (c) 2006 Microsoft Corporation -->
- <policyDefinitionResources xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
- <displayName>ActiveX Installer Service</displayName>
- <description>Installs ActiveX controls from approved installation sites</description>
- <resources>
- <stringTable>
- <string id="AxInstSv">ActiveX Installer Service</string>
- <string id="ApprovedActiveXInstallSites">Approved Installation Sites for ActiveX Controls</string>
- <string id="ApprovedActiveXInstallSites_explain">
- The ActiveX Installer Service is the solution to delegate the install of per-machine ActiveX controls to a Standard User in the enterprise.
- The list of Approved ActiveX Install sites contains the host URL and the policy settings for each host URL. Wild cards are not supported.
- </string>
- </stringTable>
- <presentationTable>
- <presentation id="ApprovedActiveXInstallSites">
- <listBox refId="ApprovedActiveXInstallSiteslist">Host URLs</listBox>
- <text>Contains policy for the host URL.</text>
- <text>For example </text>
- <text>HostName: http://activex.microsoft.com</text>
- <text>Value: 2,1,0,0</text>
- <text>The value for each Host URL is four settings in CSV format.</text>
- <text>Which represents "TPSSignedControl,SignedControl,UnsignedControl,ServerCertificatePolicy</text>
- <text>The three left most values in the policy control the installation of ActiveX controls based on their signature.</text>
- <text>They can be one of the following.</text>
- <text>0: ActiveX control will not be installed</text>
- <text>1: Prompt the user to install ActiveX control</text>
- <text>2: ActiveX control will be silently installed</text>
- <text>Controls signed by certificates in trusted publisher store will be silently installed </text>
- <text>Silent installation for unsigned controls is not supported</text>
- <text></text>
- <text>The right most value in the policy is a bitmasked flag</text>
- <text>The flags are used for ignoring https certificate errors.</text>
- <text>The default value is 0.</text>
- <text>Which means that the https connections must pass all security checks</text>
- <text></text>
- <text>Use the combination of the following values</text>
- <text>to ignore invalid certificate errors</text>
- <text>0x00000100 Ignore Unknown CA</text>
- <text>0x00001000 Ignore invalid CN</text>
- <text>0x00002000 Ignore invalid certificate date</text>
- <text>0x00000200 Ignore wrong certificate usage</text>
- <text></text>
-
- </presentation>
- </presentationTable>
- </resources>
- </policyDefinitionResources>
-