can users install browser add ons without admin privileges?

0

We have a Windows 7 SOE, and users do not have administrator privileges.

Is it possible for users to install Internet Explorer add-ons without administrator privileges?

Thanks.

Steve

Posted 2015-09-24T07:00:38.383

Reputation: 2 473

2I think the GUI requests admin, because it tries to register the ActiveX COM class globally. However, there's no reason I know of why it couldn't be registered to the per-user classes registry, which is writable without admin. – CBHacking – 2015-09-24T07:04:03.853

I think it depends on the add-n & the policies applied to the computer/user – pun – 2015-09-24T07:18:19.590

Answers

1

To my knowledge, yes.

Regardless, I would strongly advise you make some changes using the Local Group Policy Editor. Press Win+R gpedit.msc.

  • Navigate to: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer then edit:

Automatically activate newly installed add-ons to Disabled

Do not allow users to enable or disable add-ons to Enabled

  • Navigate to: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advance Page then edit:

Do not allow resetting IE settings to Enabled

Allow third-party browser extensions to Disabled

That should lock down IE in regards to add-ons. More information can be found at the source.

Hope this helps!

Insane

Posted 2015-09-24T07:00:38.383

Reputation: 2 599