Re: How to block users from installing other apps
From: 59cobalt (59cobalt_at_planetcobalt.net)
Date: 06/25/03
- Previous message: Richard Worwood: "security auditing under windows 2000 server"
- In reply to: Noonan, Wesley: "RE: How to block users from installing other apps"
- Next in thread: afreyman_at_dsw.net: "RE: How to block users from installing other apps"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 Jun 2003 23:29:17 +0200 To: focus-ms@securityfocus.com
On 2003-06-25 Noonan, Wesley wrote:
> Yeah, re-write your customized inhouse applications. That was a bad
> design decision by your developers.
Another way might be finding out, what additional permissions a normal
user would need, adjusting ACLs accordingly and removing the users from
the Local Administrators groups. Regmon [1] and Filemon [2] may be
helpful in this process.
I have up to now run into few programs I couldn't convince of running
with less privileges than suggested by $VENDOR.
> Making someone an admin is just that. To my knowledge, anything you
> can do to stop them, they can undo.
ACK.
[1] http://www.sysinternals.com/ntw2k/source/regmon.shtml
[2] http://www.sysinternals.com/ntw2k/source/filemon.shtml
Regards
Ansgar Wiechers
-----------------------------------------------------------------------------
------------------------------------------------------------------------------
- Previous message: Richard Worwood: "security auditing under windows 2000 server"
- In reply to: Noonan, Wesley: "RE: How to block users from installing other apps"
- Next in thread: afreyman_at_dsw.net: "RE: How to block users from installing other apps"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
