When the user tries to install the ActiveX control, it is likely to fail as they do NOT have administrative authority.
This behavior will occur if the server has a newer version of Xenroll.dll than the version on the user's computer.
To prevent this behavior:
1. Use NotePad to open the %SystemRoot%\System32\Certsrv\Certdat.inc file on the server.
2. Change the line that contains sXEnrollVersion="5,131,3686,0" to be sXEnrollVersion="5,131,3659,0".
3. Save the file and exit NotePad.