Blackberry SWD-20120924140022907 Name the file EnableActiveXInstallFromAD.adm and save it, 228

Administration Guide Making the BlackBerry Web Desktop Manager available to users

CLASS MACHINE CATEGORY !!RegistrySettings

KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings" ;KEYNAME "Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" POLICY !!EnableActiveXInstallFromAD

EXPLAIN !!EnableActiveXInstallFromAD_Explain VALUENAME "UseCoInstall"

VALUEON NUMERIC 1

VALUEOFF NUMERIC 0 END POLICY

END CATEGORY [strings]

EnableActiveXInstallFromAD="Allow user computers to install administrator-approved Microsoft ActiveX components."

EnableActiveXInstallFromAD_Explain="Allow user computers to install administrator-approved Microsoft ActiveX components."

RegistrySettings="Registry Settings"

2.Name the file EnableActiveXInstallFromAD.adm and save it.

3.In Microsoft Active Directory Users and Computers, right-click the organizational unit that you want to assign the Windows GPO to. Click Properties.

4.On the Group Policy tab, click New.

5.In the Name field, type a name for the new GPO.

6.In the list of GPOs, click the GPO name. Click Edit.

7.In the Group Policy Object Editor list, click Computer Configuration > Administrative Templates.

8.Right-click Administrative Templates. Perform one of the following actions:

•If the computer uses Windows 2000 Server, clear the View – Show Policies Only option.

•If the computer uses Windows Server 2003, click View – Filtering. Clear the Only show policy settings that can be fully managed check box.

9.Right-clickAdministrative Templates. Click Add/Remove Templates.

10.Add the EnableActiveXInstallFromAD.adm custom administrative template to the Windows GPO.

11.Click Administrative Templates > Registry Settings.

12.Double-clickAllow user computers to install administrator-approved Microsoft ActiveX components.

228