With the ActiveX,..it isn't all just the ActiveX,...even if you setup a GPO for a particular user to have their IE Settings allow the ActiveX install,...there is more to the story,...depending on what the ActiveX control actually is and what it actually does,...you run into the same hinderance that prevents the install of it just as the install of any other kind of normal application because or where files may attempt to be copied or registry entries that might attempt to be written or overwritten,...so the user has to be at least a local Admin just as they would to install MS Office or something.