Contents

1. ActiveX Action
2. Policy

Step 1

Create a new ActiveX Installer action by right-clicking on the ActiveX Installers folder (as the Bdb_ActiveX example below).

 
 
Select the components desired by clicking the Click to select link and then selecting the components from the window as below.  In this case the get_atlcom class has been selected.  Note:  multiple components may be selected and moved from the Available resources: to the Selected resources: list (via the arrow buttons between the two lists) which will make them part of the policy.
 

 

Step 2

Create a new Blank Application Control Policy by right-clicking on the Application Control Policies folder.  Then click on the Select an Item... link on the Application: section of the Application to Control tab.  A default filter which can be used exists in ACS called Internet Explorer which identifies Internet Explorer.

 
 

Then select the previously created ActiveX Installer Action by clicking on the Select an Item...  link next to Applications: on the Application Actions tab.  For ActiveX object control you will probably want to select the option for Same as parent for Child applications: to ensure you get the same ActiveX control from all browser instances.  The option for Send policy feedback  is optional and for common actions should be turned off as the overhead of the messages being loaded in the database isn't usually worth the process cost.  In troubleshooting or initial configuration/test scenarios it is helpful to have the feedback, but once the policy is tested and verified to be properly configured then the feedback is usually turned off.  It may be left on for a short period after wide deployment of the policy to give an indication of the proper processing of the policy. Note:  In the screenshot below Bdb_ActiveX has already been selected for the Select an Item.. link has been replaced by the action name.
 

 
Finally, set the Policy priority: so that it doesn't have the same priority as any other polices and is in the proper order in relation to other policies (so that each process will have the correct policy rules applied).  Also of course make sure the Applied To target list has the proper set of machines targeted.

• The other three options here will usually be unchecked as this policy is narrowly targeted and thus when it applies it does all the management that process needs.
• Change the Off to On and click the Save changes and the policy will be active and the targeted machines will have this management rule in place and active.