RE: How to block users from installing other apps

From: Lane Weast (lweast_at_leeclerk.org)
Date: 07/03/03

  • Next message: VNV Jeep: "RE: How to block users from installing other apps" 
    Date: Thu, 3 Jul 2003 12:05:43 -0400
To: "Jane Han" <janehan22@yahoo.com>

    How much concern is there to prevent a Trojan being installed that then installs a DNS or DHCP server service redirecting traffic (including logon requests) to an external address?
    Is this even a viable concern?
    Shouldn't the firewall be configured to block this traffic outbound and inbound?

    > -----Original Message-----
    > From: Jane Han [mailto:janehan22@yahoo.com]
    > Sent: Thursday, July 03, 2003 11:47 AM
    > To: Dennis Bauer; focus-ms@securityfocus.com
    > Subject: RE: How to block users from installing other apps
    >
    >
    > Thanks for all help.
    >
    > I downloaded regmon and filemon and going to find
    > which permission need to apply to the reg keys and
    > files level.
    >
    > Currently, I met some resistance from help desk
    > manager, which many changes could be done at users'
    > level if we need to change reg and file permission.
    > he challenged me that the only damage can be caused
    > only at local computer, not at domain.
    >
    > If someone can list all damages that caused by
    > assigning domain users to the local administrators
    > group, I would greatly appreciate it.
    >
    > Thanks in advance,
    >
    > Jane
    >
    >
    >
    > --- Dennis Bauer <dbauer@Mines.EDU> wrote:
    > > Have you tried regmon and filemon to see what you
    > > need to open for users
    > > to be able to run the apps?
    > >
    > >
    > > -----Original Message-----
    > > From: Jane Han [mailto:janehan22@yahoo.com]
    > > Sent: Wednesday, June 25, 2003 2:22 PM
    > > To: focus-ms@securityfocus.com
    > > Subject: How to block users from installing other
    > > apps
    > >
    > >
    > > Due to several customized inhouse applications, the
    > > users need to be local aministrator to lauch the
    > > applications.  Since most users are local
    > > admin, they can download and install applications
    > > such
    > > as games, AOL instant messages...from internet. 
    > >
    > > Is it possible to block users from installing
    > > applications through Group Policy in this case?  or
    > > disable internet explorer?
    > >
    > > Any solutions or suggestions?
    > >
    > >
    > > Thanks in advance,
    > > Jane
    > >
    > >
    > > __________________________________
    > > Do you Yahoo!?
    > > SBC Yahoo! DSL - Now only $29.95 per month!
    > > http://sbc.yahoo.com
    > >
    > >
    > --------------------------------------------------------------
    > ----------
    > > -----
    > >
    > --------------------------------------------------------------
    > ----------
    > > ------
    > >
    >
    >
    > __________________________________
    > Do you Yahoo!?
    > SBC Yahoo! DSL - Now only $29.95 per month!
    > http://sbc.yahoo.com
    >
    > --------------------------------------------------------------
    > ---------------
    > --------------------------------------------------------------
    > ----------------
    >
    >

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: VNV Jeep: "RE: How to block users from installing other apps"

    Relevant Pages

    • Re: Q about Making Subfolders in the Applications Folder
      ... You can put applications anywhere you want them, ... You should leave Apple-supplied software where Apple installs ... So what the OP needs to do to maintain his desired subfolder ... Or Spotlight to get/gather apps. ...
      (comp.sys.mac.apps)
    • Re: Basic Solaris Questions
      ... Irrespective of where the applications are installed (/wibbly/wobbly, ... Now, lets do that for a common command in /usr/local/bin, emacs: ... In a badly set up system, the ldd might have output: ... installs their own version of, say, libc.so in /usr/local/lib and now ...
      (comp.unix.solaris)
    • Re: Partition or not?
      ... apps that X installs in the Applications folder is ... partition because of the necessity of the OS to be ...
      (comp.sys.mac.system)
    • Massive right click menu
      ... Over time and many installs of lots of apps, ... I've scouted around and found various apps designed to pare ... I asked for some of the entries but soon found I didn't really need ... setting with out altering installed applications to speak of. ...
      (microsoft.public.windowsxp.general)
    • Re: XP Roaming Profile Issue
      ... This behavior is because the applications are installed either by another ... The profile ships up and down to the ... > For example if they sit at a newly imaged machine and installs all their ... > with the user and is poulated with the respective application settings. ...
      (microsoft.public.win2000.active_directory)