Re: Sub7 (SubSeven), Win2k, and IE 5.5

From: Micheal Patterson (micheal@cancercare.net)
Date: 03/21/02 

From: "Micheal Patterson" <micheal@cancercare.net>
To: "Attila Kisko" <attila.kisko@fathomtechnology.com>, <focus-ms@securityfocus.com>
Date: Thu, 21 Mar 2002 16:46:46 -0600

NAV Corp Edition services are unable to be stopped or removed even with
administrator rights if that option has been disabled via the Symantec
System Center.

To allow/deny users the ability to stop/start the service, load up the SSC,
highlight the specific system then go to > All Tasks > Norton AntiVirus >
Client Administrator Only Options > Security > and check/uncheck the "Lock
the ability of users to unload Norton AntiVirus Services".

If you don't want them to be able to uninstall it, then you also check the
"Ask for password to allow uninstall of Norton AntiVirus client". This is
the password that you used when you set up the specific group after initial
installation. 

--

Micheal Patterson
Network Administration
Cancer Care Network
405-733-2230

----- Original Message -----
From: "Attila Kisko" <attila.kisko@FATHOMTECHNOLOGY.com>
To: <focus-ms@securityfocus.com>
Sent: Thursday, March 21, 2002 9:54 AM
Subject: RE: Sub7 (SubSeven), Win2k, and IE 5.5

>
>
> >> It is also not possible to disable NAV from the workstation -
> >> it's centrally managed, and frighteningly current.
> >
> > can't think of a piece of software can't be disabled or at least
> disrupted by someone with Administrator or root rights. If you
> > can do it from the keyboard, a program can do it.
>
> If you stop the Norton Antivirus Client service and/or the Defwatch
> service from the Services MMC Snap-In, the antivirus client is stopped.
> (Its icon shown on the systray will changed.) Any user with admin
> privileges (and maybe power users) can do this.
>
> BR,
> Attila Kisko
>

Relevant Pages

  • Re: Limited account users unable to print from XP Home Edition
    ... I'll use my crystal ball here and tell you that you have Norton antivirus ... > My printer works perfectly from the administrator ... account, but neither of the limited account users can print. ... > They do not get any error messages, ...
    (microsoft.public.windowsxp.print_fax)
  • Re: No rights to install Norton
    ... "The System Administrator has set policies to prevent this installation" ... when installing Norton AntiVirus 2003 or Norton AntiVirus 2003 Professional ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Sub7 (SubSeven), Win2k, and IE 5.5
    ... disrupted by someone with Administrator or root rights. ... If you stop the Norton Antivirus Client service and/or the Defwatch ... (Its icon shown on the systray will changed.) ... privileges (and maybe power users) can do this. ...
    (Focus-Microsoft)
  • Re: Membership of user in Active Directory
    ... This has nothing to do with Active Directory. ... Can you not schedule Live-Updates while logged on as Administrator? ... > I installed Norton Antivirus on my local workstation, ... > Also, if I login as Administrator locally, I am able to do ...
    (microsoft.public.win2000.active_directory)
  • RE: Norton AntiVirus 2004
    ... Has anyone installed Norton AntiVirus 2004 with Windows ... privileges to complete configuration using the Information ... Wizard) when a user (other than Administrator) logs onto ...
    (microsoft.public.win2000.general)
Loading