RE: How to block users from installing other apps

From: Jane Han (janehan22_at_yahoo.com)
Date: 07/03/03

  • Next message: Noonan, Wesley: "RE: How to block users from installing other apps" 
    Date: Thu, 3 Jul 2003 08:46:33 -0700 (PDT)
To: Dennis Bauer <dbauer@Mines.EDU>, focus-ms@securityfocus.com

    Thanks for all help.

    I downloaded regmon and filemon and going to find
    which permission need to apply to the reg keys and
    files level.

    Currently, I met some resistance from help desk
    manager, which many changes could be done at users'
    level if we need to change reg and file permission.
    he challenged me that the only damage can be caused
    only at local computer, not at domain.

    If someone can list all damages that caused by
    assigning domain users to the local administrators
    group, I would greatly appreciate it.

    Thanks in advance,

    Jane

    --- Dennis Bauer <dbauer@Mines.EDU> wrote:
    > Have you tried regmon and filemon to see what you
    > need to open for users
    > to be able to run the apps?
    >
    >
    > -----Original Message-----
    > From: Jane Han [mailto:janehan22@yahoo.com]
    > Sent: Wednesday, June 25, 2003 2:22 PM
    > To: focus-ms@securityfocus.com
    > Subject: How to block users from installing other
    > apps
    >
    >
    > Due to several customized inhouse applications, the
    > users need to be local aministrator to lauch the
    > applications.  Since most users are local
    > admin, they can download and install applications
    > such
    > as games, AOL instant messages...from internet. 
    >
    > Is it possible to block users from installing
    > applications through Group Policy in this case?  or
    > disable internet explorer?
    >
    > Any solutions or suggestions?
    >
    >
    > Thanks in advance,
    > Jane
    >
    >
    > __________________________________
    > Do you Yahoo!?
    > SBC Yahoo! DSL - Now only $29.95 per month!
    > http://sbc.yahoo.com
    >
    >
    ------------------------------------------------------------------------
    > -----
    >
    ------------------------------------------------------------------------
    > ------
    >

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Noonan, Wesley: "RE: How to block users from installing other apps"

    Relevant Pages

    • Re: Access Control Best Practices for shared hosting seem at odds with Web Site Starters
      ... the full context of the bullet I quoted appears to be the HTTP POST ... Do not allow anonymous user to have write permission. ... content to the server, then they can write anything onto the server. ... More secure alternatives are applications that store ...
      (microsoft.public.inetserver.iis.security)
    • Re: Tightening the default CAS policy
      ... I suppose a custom membership condition (as URL Permission would be way to ... ClickOnce Applications - FullTrust ... ClickOnce applications at full trust, and if the administrator wants to limit ... permissions to write to install applications and write to program files ...
      (microsoft.public.dotnet.security)
    • RE: Client Config SBS2003 Installation
      ... Thank you for posting to the SBS Newsgroup. ... The client users do not have the permission to install the applications. ...
      (microsoft.public.windows.server.sbs)
    • Re: Zone Alarm Amnesia!
      ... > applications to access the firewall. ... > After each switch on/reboot, it has forgotten all permission and every ...
      (comp.security.firewalls)
    • Re: Prevent users from installing software
      ... Wouldn't setting them to read only prevent the users from writing to those ... These users frequently work with various applications and need to ... otherwise just give write permission to admin. ...
      (microsoft.public.win2000.security)