A user who does not have administrative credentials cannot install an ActiveX control when the CoGetClassObjectFromURL function is used on a Windows Vista-based computer, even if ActiveX Installer Service is enabled

Consider the following scenario. You develop an application that calls the CoGetClassObjectFromURL function to install an ActiveX control. On a Windows Vista-based computer that has ActiveX Installer Service enabled, a user who has the typical user rights and the typical permissions runs the application. In this scenario, you expect that the user can install an ActiveX control. However, the user is prompted to enter administrative credentials when the user tries to install an ActiveX control. Therefore, a user who does not have administrative credentials cannot install an ActiveX control.

Service pack information

To resolve this problem, obtain the latest service pack for Windows Vista. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Update information

You can also resolve this problem by installing the following security update:
After you install the security update, you must modify the registry as follows.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

1. Click Start, type regedit in the Start Search box, and then press ENTER.
2. Locate the following registry subkey, and then click the following registry subkey:
   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
3. On the Edit menu, point to New, and then click Key.
4. Type FEATURE_WEBOC_AXIS_SUPPORT_KB942198, and then press ENTER.
5. On the Edit menu, point to New, and then click DWORD Value.
6. Type *, and then press ENTER.
7. On the Edit menu, click Modify.
8. Type 1, and then click OK.
9. Exit Registry Editor.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista, 32-bit version

Windows Vista, 64-bit version

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Windows Vista Service Pack 1.

For more information about the CoGetClassObjectFromURL function, visit the following Microsoft Developer Network (MSDN) Web site: The ActiveX Installer Service (AxIS) is an optional component in Windows Vista. Administrators can use this component together with Group Policy to determine which ActiveX controls users who do not have administrative credentials can install.

For more information about the ActiveX Installer Service in Windows Vista, visit the following Microsoft Web site:For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: