Re: How to block users from installing other apps

From: Marian Ion (e-licitatie.ro) (marian.ion_at_e-licitatie.ro)
Date: 06/27/03

  • Next message: Mike Theriault: "RE: SP4 instalation failure" 
    To: <focus-ms@securityfocus.com>
Date: Fri, 27 Jun 2003 09:49:42 +0300

    I guess the best easiest way is to allow only signed applications and only
    by providers you want (like ms, adobe, corel, etc).
    It is very difficult to restrict based on names, paths, or other criteria
    that can be changed.

    ----- Original Message -----
    From: <afreyman@dsw.net>
    To: <focus-ms@securityfocus.com>
    Sent: Thursday, June 26, 2003 12:55 AM
    Subject: RE: How to block users from installing other apps

      You have several options, depending on whether you're using Windows
    2k3 or 2k. You can block the "Add/Remove programs" from the control panel or
    you can block the entire control panel. You can also disable IE. With W2k3,
    there is an available feature to block based on program path and an .exe
    hash. This has been discussed here in terms of security, but can also be
    used to prevent users from installing and running apps, if you have a
    specific list of apps that you want to block. Do remember that this feature
    only works on Windows XP. There also additional software restriction rules
    that you can create in order to prevent the user from installing various
    applications. Another approach would be to NOT make the users local admins
    and just run/install apps with elevated privileges.

    Arthur Freyman

    afreyman@dsw.net

    -----Original Message-----
    From: Jane Han [mailto:janehan22@yahoo.com]
    Sent: Wednesday, June 25, 2003 1:22 PM
    To: focus-ms@securityfocus.com
    Subject: How to block users from installing other apps

    Due to several customized inhouse applications, the
    users need to be local aministrator to lauch the
    applications. Since most users are local
    admin, they can download and install applications such
    as games, AOL instant messages...from internet.

    Is it possible to block users from installing
    applications through Group Policy in this case? or
    disable internet explorer?

    Any solutions or suggestions?

    Thanks in advance,
    Jane

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    ----------------------------------------------------------------------------
    -
    ---------------------------------------------------------------------------- 

    --
----------------------------------------------------------------------------
-
----------------------------------------------------------------------------
--
-----------------------------------------------------------------------------
------------------------------------------------------------------------------
  • Next message: Mike Theriault: "RE: SP4 instalation failure"

    Relevant Pages

    • RE: How to block users from installing other apps
      ... you can block the entire control panel. ... specific list of apps that you want to block. ... that you can create in order to prevent the user from installing various ... Due to several customized inhouse applications, ...
      (Focus-Microsoft)
    • Re: I WANT MY FP2000 BACK-Fr Alex
      ... > However you needed to have Norton disabled when you installed ... > In general any anti-virus application should be disabled when installing ... > Thomas A. Rowe ... >>>> What other applications do I have. ...
      (microsoft.public.frontpage.client)
    • Re: Whats the Deal with IE8
      ... What third-party firewall? ... applications running in the background when you installed and/or ... I generally follow the same procedure when installing major upgrades. ... 13- Disable your security software. ...
      (microsoft.public.windowsupdate)
    • RE: How to block users from installing other apps
      ... How to block users from installing other apps ... Due to several customized inhouse applications, ...
      (Focus-Microsoft)
    • Re: ATAPI CD-ROM, UNIX"NEW GUY"
      ... >> As of now it is no longer working properly I cannot finnish installing ... Most of the applications you list are available for Mac OSX; ... Select the best operating system to support the applications. ...
      (freebsd-questions)