Blackberry SWD-20120924140022907 - page 228

CLASS MACHINE
CATEGORY !!RegistrySettings
KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings"
;KEYNAME "Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings"
POLICY !!EnableActiveXInstallFromAD
EXPLAIN !!EnableActiveXInstallFromAD_Explain
VALUENAME "UseCoInstall"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
[strings]
EnableActiveXInstallFromAD="Allow user computers to install administrator-approved Microsoft ActiveX
components."
EnableActiveXInstallFromAD_Explain="Allow user computers to install administrator-approved Microsoft ActiveX
components."
RegistrySettings="Registry Settings"
2. Name the file EnableActiveXInstallFromAD.adm and save it.
3. In Microsoft Active Directory Users and Computers, right-click the organizational unit that you want to assign the
Windows GPO to. Click Properties.
4. On the Group Policy tab, click New.
5. In the Name field, type a name for the new GPO.
6. In the list of GPOs, click the GPO name. Click Edit.
7. In the Group Policy Object Editor list, click Computer Configuration > Administrative Templates.
8. Right-click Administrative Templates. Perform one of the following actions:
• If the computer uses Windows 2000 Server, clear the View – Show Policies Only option.
• If the computer uses Windows Server 2003, click View – Filtering. Clear the Only show policy settings that can
be fully managed check box.
9. Right-click Administrative Templates. Click Add/Remove Templates.
10. Add the EnableActiveXInstallFromAD.adm custom administrative template to the Windows GPO.
11. Click Administrative Templates > Registry Settings.
12. Double-click Allow user computers to install administrator-approved Microsoft ActiveX components.
Administration Guide Making the BlackBerry Web Desktop Manager available to users
228