RE: How to block users from installing other apps

From: Matthew Wagenknecht (Matthew.Wagenknecht_at_quantum.com)
Date: 06/26/03

  • Next message: Ansgar Wiechers: "Re: How to block users from installing other apps" 
    To: "'Jane Han'" <janehan22@yahoo.com>
Date: Thu, 26 Jun 2003 08:44:57 -0600

    You didn't mention what the client OS is, but I'll assume Windows 2000. I'm
    not sure if it really matters any way.

    Through Group Policies in Acitve Directory or Local Policies on the
    individual machines, you can control what exe's are allowed to be launched.
    Last time I did this was on a Windows 95-based production environment so
    it's probably changed a little. Just add in the exe names for the
    applications that you want them to run and everything else would be blacked.

    However, an easy way around this would be to rename AIM.exe to
    whatever_is_allowed.exe. I would recommend testing this to make sure I
    haven't made any wrong assumptions.

    Good Luck.. It really is an HR issue, not a technical issue.

    Oh, yeah. Wesly Noonan hit it on the nose.. Bad application design is the
    real issue.

    .:: Matt ::..
     
    Bother!, said Pooh as his network froze..
    -----------
    varified gramaticly correckt using EverRight Spellchecher v1.0

    -----Original Message-----
    From: Jane Han [mailto:janehan22@yahoo.com]
    Sent: Wednesday, June 25, 2003 2:22 PM
    To: focus-ms@securityfocus.com
    Subject: How to block users from installing other apps

    Due to several customized inhouse applications, the
    users need to be local aministrator to lauch the
    applications.  Since most users are local
    admin, they can download and install applications such
    as games, AOL instant messages...from internet. 

    Is it possible to block users from installing
    applications through Group Policy in this case?  or
    disable internet explorer?

    Any solutions or suggestions?

    Thanks in advance,
    Jane

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

    ----------------------------------------------------------------------------
    -
    ---------------------------------------------------------------------------- 

    --
-----------------------------------------------------------------------------
------------------------------------------------------------------------------
  • Next message: Ansgar Wiechers: "Re: How to block users from installing other apps"

    Relevant Pages

    • Re: How to Add MyFile.exe to the Run only allowed Windows applications, using a Script / Registry /
      ... Since you are already using group policies, ... Click next to List of allowed applications ... I have defined 2 groups policy in Windows Server 2003 SP2, ...
      (microsoft.public.windows.server.security)
    • Re: Recoverd mahine from SP2 nightmare
      ... It contains advice ... using Windows XP "prettifications". ... applications you do not use. ... You should at least turn on the built in firewall. ...
      (microsoft.public.windowsupdate)
    • Re: Slow startup and shutdown
      ... > applications that have always been present, ... The problem began before loading SP2 and hasn't changed. ... using Windows XP "prettifications". ... You should at least turn on the built in firewall. ...
      (microsoft.public.windowsxp.perform_maintain)
    • Re: Ad Aware SE
      ... Run some of the other AntiSpyware applications first. ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... You should at least turn on the built in firewall. ...
      (microsoft.public.windowsxp.general)
    • Re: Boot slow
      ... many applications you have starting up, what OS (Home, Professional, 64bit, ... Microsoft has these suggestions for Protecting your computer from the ... using Windows XP "prettifications". ... You should periodically check your hard drivefor errors and defragment ...
      (microsoft.public.windowsxp.basics)