So MS releases this waring, with a KB with a "FixIT!" button, when clicking it your are automaticly protected. But what if you have a couple of hundred PCs, even thousands.

MS says, yes change these registrty keys, you can deploy them using Group Policies.

Well wouldn't it be nice if MS would supply a policy template file (.ADM) and save IT Pro's a lot of time. Unfourtunalty no.

So I spend some time creating it the day before yesterday, but yesterday I discoverd a better one. I combined it and here it is,

 Start file------------------------- Save below in a TXT file and save as .ADM file.

; KB972890 Workaround - Prevent Microsoft Video ActiveX Control in Internet Explorer
; http://support.microsoft.com/default.aspx/kb/972890
; When patch is released and deployed, first disable this policy before removing the GPO!
; 8 July 2009: Steven Bink (http://bink.nu) and 'DataBitz' (http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24548832.html)