Bewerken

Delen via


Policy CSP - ActiveXControls

Tip

This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see Understanding ADMX-backed policies.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ApprovedInstallationSites

Scope Editions Applicable OS
✅ Device
❌ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./Device/Vendor/MSFT/Policy/Config/ActiveXControls/ApprovedInstallationSites

This policy setting determines which ActiveX installation sites standard users in your organization can use to install ActiveX controls on their computers. When this setting is enabled, the administrator can create a list of approved Activex Install sites specified by host URL.

  • If you enable this setting, the administrator can create a list of approved ActiveX Install sites specified by host URL.

  • If you disable or don't configure this policy setting, ActiveX controls prompt the user for administrative credentials before installation.

Note

Wild card characters can't be used when specifying the host URLs.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name ApprovedActiveXInstallSites
Friendly Name Approved Installation Sites for ActiveX Controls
Location Computer Configuration
Path Windows Components > ActiveX Installer Service
Registry Key Name SOFTWARE\Policies\Microsoft\Windows\AxInstaller
Registry Value Name ApprovedList
ADMX File Name ActiveXInstallService.admx

Policy configuration service provider