ActiveX controls that perform cross-domain data binding cannot be used in InfoPath 2003 (892950)


The information in this article applies to:

  • Microsoft Office InfoPath 2003
  • Microsoft Office InfoPath 2003, Service Pack 1 (SP1)

SYMPTOMS

ActiveX controls that perform cross-domain data binding cannot be used in Microsoft Office InfoPath 2003. When you add an ActiveX control to an InfoPath 2003 form, you receive the following error message:
Safety settings on this machine prohibit accessing a data source on another domain.

CAUSE

This problem occurs because InfoPath 2003 hosts ActiveX controls in the Internet security zone. Therefore, if an ActiveX control tries to perform cross-domain data binding, the binding is unsuccessful. If your InfoPath 2003 form is located in one domain or is published in one domain and an ActiveX control tries to access a data source in another domain, you experience this problem.

Note By default, Microsoft Internet Explorer disables the Access data sources across domains setting in the Internet security zone.

STATUS

This behavior is by design.

MORE INFORMATION

Steps to reproduce the problem

Add a Microsoft Office Spreadsheet 11.0 ActiveX control to an InfoPath 2003 form. To do this, follow these steps:
  1. Start InfoPath 2003.
  2. On the File menu, click Design a Form.
  3. In the Design a Form pane, click New Blank Form.
  4. On the Insert menu, click More Controls.
  5. In the Controls pane, click Add or Remove Custom Controls.
  6. In the Add or Remove Custom Controls dialog box, click Add.
  7. In the Add an ActiveX Control dialog box, click Microsoft Office Spreadsheet 11.0, and then click Next four times.
  8. Click Finish, and then click OK to add the ActiveX control to the Controls pane.
  9. In the Controls pane, add the Microsoft Office Spreadsheet 11.0 control to the form to create a new spreadsheet control.
  10. Double-click the new spreadsheet control. In the Microsoft Office Spreadsheet 11.0 Properties dialog box, click the Import tab.
  11. In the Data type box, click HTML.
  12. In the URL box, type the following:

    http://moneycentral.msn.com/scripts/webquote.dll?iPage=qd&Symbol=msft

  13. Click Import Now.

    You receive the error message that is mentioned in the "Symptoms" section.

    Note If you receive a Microsoft Office 2003 Web Components message box, click Cancel.

For additional information about security guidelines for InfoPath 2003 forms, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ipsdk/html/ipsdkSecureAForm_HV01083590.asp

Modification Type:MajorLast Reviewed:3/9/2005
Keywords:kbControl kbSecurity kbtshoot kbBug kbprb KB892950 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.