I've had pretty good sucess with converting cab based controls to msi (either with VS for in house or capture install for oddball vendor controls). Here's a thread over at Appdeploy that is covering a similar topic. Topic: Large Scale Deployment of Active X controls, How can users install Active X controls? http://www.appdeploy.com/messageboards/tm.asp?m=3659&mpage=1 Linked in the above thread is the following MS KB article. Name: How To Install ActiveX Controls in Internet Explorer Using the Active Directory (KB280579) http://support.microsoft.com/kb/280579 Assuming the MSI registers the CLSID, you should be able to get away without the cert. Hope that helps