So MS releases this waring, with a KB with a "FixIT!" button, when clicking it your are automaticly protected. But what if you have a couple of hundred PCs, even thousands.

MS says, yes change these registrty keys, you can deploy them using Group Policies.

Well wouldn't it be nice if MS would supply a policy template file (.ADM) and save IT Pro's a lot of time. Unfourtunalty no.

So I spend some time creating it the day before yesterday, but yesterday I discoverd a better one. I combined it and here it is,

Download: http://bink.nu/files/folders/scripts/entry44446.aspx

KB972890 Workaround - Prevent Microsoft Video ActiveX Control in Internet Explorer
http://support.microsoft.com/default.aspx/kb/972890
When patch is released and deployed, first disable this policy before removing the GPO!
8 July 2009: Steven Bink (http://bink.nu) and 'DataBitz' (http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24548832.html)

Send via e-mail | Submit to Digg | Add to Live Favorites