Consider the following scenario. You develop an application that calls the CoGetClassObjectFromURL function to install an ActiveX control. A user who has the typical user rights and the typical permissions runs the application on a Windows Vista-based computer. In this scenario, you expect that the user can install an ActiveX control. However, the user is prompted to enter administrative credentials when the user tries to install an ActiveX control. Therefore, a user who does not have administrative credentials cannot install an ActiveX control.