RE: How to block users from installing other apps

afreyman_at_dsw.net
Date: 06/25/03

  • Next message: Dennis Bauer: "RE: How to block users from installing other apps"
    To: focus-ms@securityfocus.com
    Date: Wed, 25 Jun 2003 14:55:47 -0700
    
    

              You have several options, depending on whether you're using Windows
    2k3 or 2k. You can block the "Add/Remove programs" from the control panel or
    you can block the entire control panel. You can also disable IE. With W2k3,
    there is an available feature to block based on program path and an .exe
    hash. This has been discussed here in terms of security, but can also be
    used to prevent users from installing and running apps, if you have a
    specific list of apps that you want to block. Do remember that this feature
    only works on Windows XP. There also additional software restriction rules
    that you can create in order to prevent the user from installing various
    applications. Another approach would be to NOT make the users local admins
    and just run/install apps with elevated privileges.

            
    Arthur Freyman
            
    afreyman@dsw.net

    -----Original Message-----
    From: Jane Han [mailto:janehan22@yahoo.com]
    Sent: Wednesday, June 25, 2003 1:22 PM
    To: focus-ms@securityfocus.com
    Subject: How to block users from installing other apps

    Due to several customized inhouse applications, the
    users need to be local aministrator to lauch the
    applications.  Since most users are local
    admin, they can download and install applications such
    as games, AOL instant messages...from internet. 

    Is it possible to block users from installing
    applications through Group Policy in this case?  or
    disable internet explorer?

    Any solutions or suggestions?

    Thanks in advance,
    Jane

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    ----------------------------------------------------------------------------
    -
    ----------------------------------------------------------------------------

    --
    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------
    

  • Next message: Dennis Bauer: "RE: How to block users from installing other apps"

    Relevant Pages

    • RE: How to block users from installing other apps
      ... Asunto: RE: How to block users from installing other apps ... Create an OU with Admin privileges that is set to last for 24 hours. ... > Due to several customized inhouse applications, ...
      (Focus-Microsoft)
    • Re: How to block users from installing other apps
      ... I guess the best easiest way is to allow only signed applications and only ... How to block users from installing other apps ... SBC Yahoo! ...
      (Focus-Microsoft)
    • RE: How to block users from installing other apps
      ... How to block users from installing other apps ... Due to several customized inhouse applications, ...
      (Focus-Microsoft)
    • Re: The Dock through the years
      ... They being apple. ... I can either put the applications where I want ... What I do, as I've said, is leave the Apple apps where the installer ... So I don't know in what way you think the Launcher fails to perform ...
      (uk.comp.sys.mac)
    • Re: Is that a joke ?
      ... than C++ apps for most uses. ... It probably looks fast to Java or VB developers but what ... > What about CAD, CAE, CAM, scientific applications, utilities, math, ... a garbage collector doesn't make good programmers or safe ...
      (microsoft.public.dotnet.general)

  • Quantcast