Are there any known security issues with PWA ActiveX controls

[rt]

My client has a "no ActiveX" policy. I've searched the net and this
group to find out how to work around it but I have one additional
question:

Does anyone know of security issues that have actually occurred with
PWA ActiveX controls - as opposed to the theoretical possibility that
something might happen with ActiveX controls in general?

(I'm doing an EPM2007 implementation, btw).

Thanks for your help,

rt

 

[Ben Howard]

Hi, I haven't come across any security issues with the ActiveX control,
either in this or previous version. There isn't really any work arounds, you
need the control to run PS, though team members don't need it for timesheets
(differs for Ps2003).

 

[Jack Dahlgren]

One workaround if they don't want users to have activex controls on their
desktop is to use terminal services or citrix or tarantella and only have
the activex controls on the application server. This would limit the
exposure.
But in any case, some machine somewhere has to have the activex controls if
you are going to use Microsoft Project Server and PWA.

-Jack Dahlgren