"Sebastian G." wrote:

> Ant wrote:
>> "Sebastian G." wrote:
>>> Ant wrote:
>>>> Error messages (e.g. 404) don't appear in my IE without OK-ing an
>>>> ActiveX prompt.
>>> Interesting. How did you get such a configuration?
>> By tweaking the registry values under ...\Internet Settings\Zones\0
>
> And which exactly? I configured everything possible for the Local Zone,
> including everything from IE's GUI as well as all group policies.

Changing the 'Flags' value in zone 0[1] to 0x47 causes the 'My
Computer' icon to appear on the security tab in the Internet settings
dialog. You can then manipulate the settings as for other zones. I've
set the running of ActiveX to 'prompt'.

[1]
I did this for my user account under HKU, rather than HKLM.

>>> Instantiation already happens before it tries to apply its policies.
>> Perhaps limiting ActiveX in *all* zones would stop it.
>
> No, that won't help either: The problem is that the instantiation is done by
> the COM Server (typically running in the DCOM Server Service), and it has
> its own policies and configuration. And its default policy is to
> automatically download, install and update every control it stumbles upon.

I've disabled DCOM using dcomcnfg.