RE: How to block users from installing other apps

From: Noonan, Wesley (Wesley_Noonan_at_bmc.com)
Date: 07/03/03

  • Next message: Lane Weast: "RE: How to block users from installing other apps" 
    To: "'Jane Han'" <janehan22@yahoo.com>, Dennis Bauer <dbauer@Mines.EDU>, focus-ms@securityfocus.com
Date: Thu, 3 Jul 2003 10:57:03 -0500

    Let's see... pick one.

    User installs app they weren't supposed to. App is actually Trojan for
    hacker. Hacker can now start perusing your network from the inside.

    User installs app they weren't supposed to. App is actually a zombie
    program. Zombie program starts flooding your network. Denial of Service
    takes network out.

    User installs app they weren't supposed to. App is actually a virus. Virus
    self replicates through your network. Help desk manager sad that he has to
    work overtime to scrub systems.

    I'm sure others can add to the list.

    Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
    Senior QA Rep.
    BMC Software, Inc.
    (713) 918-2412
    wnoonan@bmc.com
    http://www.bmc.com

    > -----Original Message-----
    > From: Jane Han [mailto:janehan22@yahoo.com]
    > Sent: Thursday, July 03, 2003 10:47
    > To: Dennis Bauer; focus-ms@securityfocus.com
    > Subject: RE: How to block users from installing other apps
    >
    > Thanks for all help.
    >
    > I downloaded regmon and filemon and going to find
    > which permission need to apply to the reg keys and
    > files level.
    >
    > Currently, I met some resistance from help desk
    > manager, which many changes could be done at users'
    > level if we need to change reg and file permission.
    > he challenged me that the only damage can be caused
    > only at local computer, not at domain.
    >
    > If someone can list all damages that caused by
    > assigning domain users to the local administrators
    > group, I would greatly appreciate it.
    >
    > Thanks in advance,
    >
    > Jane
    >
    >
    >
    > --- Dennis Bauer <dbauer@Mines.EDU> wrote:
    > > Have you tried regmon and filemon to see what you
    > > need to open for users
    > > to be able to run the apps?
    > >
    > >
    > > -----Original Message-----
    > > From: Jane Han [mailto:janehan22@yahoo.com]
    > > Sent: Wednesday, June 25, 2003 2:22 PM
    > > To: focus-ms@securityfocus.com
    > > Subject: How to block users from installing other
    > > apps
    > >
    > >
    > > Due to several customized inhouse applications, the
    > > users need to be local aministrator to lauch the
    > > applications.  Since most users are local
    > > admin, they can download and install applications
    > > such
    > > as games, AOL instant messages...from internet.
    > >
    > > Is it possible to block users from installing
    > > applications through Group Policy in this case?  or
    > > disable internet explorer?
    > >
    > > Any solutions or suggestions?
    > >
    > >
    > > Thanks in advance,
    > > Jane
    > >
    > >
    > > __________________________________
    > > Do you Yahoo!?
    > > SBC Yahoo! DSL - Now only $29.95 per month!
    > > http://sbc.yahoo.com
    > >
    > >
    > ------------------------------------------------------------------------
    > > -----
    > >
    > ------------------------------------------------------------------------
    > > ------
    > >
    >
    >
    > __________________________________
    > Do you Yahoo!?
    > SBC Yahoo! DSL - Now only $29.95 per month!
    > http://sbc.yahoo.com
    >
    > --------------------------------------------------------------------------
    > ---
    > --------------------------------------------------------------------------
    > ----

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Lane Weast: "RE: How to block users from installing other apps"