can users install browser add ons without admin privileges?

We have a Windows 7 SOE, and users do not have administrator privileges. Is it possible for users to install Internet Explorer add-ons without administrator privileges? Thanks.

internet-explorer
browser-addons
administrator
privileges

asked Sep 24, 2015 at 7:00 2,841 17 17 gold badges 72 72 silver badges 121 121 bronze badges

I think the GUI requests admin, because it tries to register the ActiveX COM class globally. However, there's no reason I know of why it couldn't be registered to the per-user classes registry, which is writable without admin.

Commented Sep 24, 2015 at 7:04 I think it depends on the add-n & the policies applied to the computer/user Commented Sep 24, 2015 at 7:18

1 Answer 1

To my knowledge, yes.

Regardless, I would strongly advise you make some changes using the Local Group Policy Editor. Press Win + R gpedit.msc .

Navigate to: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer then edit:

Automatically activate newly installed add-ons to Disabled

Do not allow users to enable or disable add-ons to Enabled

Navigate to: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advance Page then edit:

Do not allow resetting IE settings to Enabled

Allow third-party browser extensions to Disabled

That should lock down IE in regards to add-ons. More information can be found at the source.