How to install Vista ActiveX Installer Service for the Web Agent
To install the Sophos NAC Web Agent on computers running Windows Vista, you must ensure that the Vista ActiveX Installer Service is installed and that the group policy setting for ActiveX controls is enabled.
What to do
Perform the following on each computer running Vista:
1. Install ActiveX Installer Service
- Go to Control Panel >Programs and Features > Turn Windows features on and off.
- Under Services, locate AxInstSV which is the ActiveX Installer Service. Set the service to run automatically and start the service.
2. Enable the Group policy setting for ActiveX controls.
- In the Run dialog box (<windows key> + <R>) type
gpedit.mscto open the Group Policy Editor - Navigate to the following node in group policy: Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > ActiveX Installer Service
- Double click Approved Installation Sites for ActiveX controls.
- Click Enabled > Show > Add.
- In the Enter the name of the item to be added field, type the URL for the web agent (e.g. http://172.16.140.80)
- In the Enter the value of the item to be added field, type the value
2,1,0,0 - Click OK 3 times and close the group policy object editor
- Restart the computer.
Technical information
The value 2,1,0,0 is derived from the following information. The first three digits indicate how the ActiveX control should be installed based on the signature. The first digit is for trusted controls, the second digit is for signed controls, and the third digit is for unsigned controls. The possible values are: 0 = do not install, 1 = prompt user to install, and 2 = silent install. The silent install is not permitted for unsigned controls. The last digit is a bitmask flag indicating whether or not to ignore HTTP certificate errors. The possible values are: 0 = no certificate errors (default), 256 = ignore unknown CA, 4096 = ignore unknown CN, 8192 = ignore invalid certificate date, and 512 = ignore wrong certificate usage.
Refer also to the knowledgebase article How to configure Internet Explorer for the Web Agent.
If you need more information or guidance, then please contact technical support.
- Article ID: 24697
- Created: 19 Apr 2007
- Last updated: 10 Oct 2008
