FW: Active Directory Question

From: Wiles, Sean (Sean.Wiles_at_marks-and-spencer.com)
Date: 01/12/04

  • Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: Active Directory Question" 
    Date: Mon, 12 Jan 2004 15:46:54 -0000
To: <focus-ms@securityfocus.com>

    I don't think you can do that with policies unless you create a custom
    template. And that would get really messy to maintain as it would be
    based on NTFS permissions.

    Don't know if it is useful but have you looked at Appsec.exe free from
    Microsoft. It stops all apps except those you allow on a server by
    server basis.

    Kind regards

    Sean

    -----Original Message-----
    From: Simon Taplin [mailto:simont@pop.co.za]
    Sent: 10 January 2004 17:16
    To: focus-ms@securityfocus.com
    Subject: Active Directory Question

    Is is possible to setup a policy on Win2000 Active Directory whereby you
    can
    use wildcards to deny users access to running certain programs, for
    example
    blocking userss running setup*.*

    Thanks
    Simon 

    ---
This email is hopefully virus free as it has been
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.558 / Virus Database: 350 - Release Date: 2004/01/02
 
-----------------------------------------------------------------------
Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422 
Facsimile (020) 7487 2670
www.marksandspencer.com
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB. These firms are authorised and regulated by the Financial Services Authority. 
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: Active Directory Question"

    Relevant Pages

    • RE: Active Directory Question
      ... Is is possible to setup a policy on Win2000 Active Directory whereby you can ... blocking userss running setup*.* ... This email is hopefully virus free as it has been ...
      (Focus-Microsoft)
    • SBS Setup Error: An error occurred while creating user accounts...
      ... At the end of the SBS Setup, I get the error: ... creating user accounts. ... create a test user to verify that Active Directory is running. ... I'm then prompted to restart the server, but it doesn't think it has finished ...
      (microsoft.public.windows.server.sbs)
    • RE: SBS Setup Error: An error occurred while creating user accounts...
      ... An OU called "Domain Users" existed at the root of the domain. ... At the end of the SBS Setup, I get the error: ... create a test user to verify that Active Directory is running. ... I'm then prompted to restart the server, but it doesn't think it has finished ...
      (microsoft.public.windows.server.sbs)
    • Re: RAS errors - removing Everyone from Pre-Windows 2000
      ... We do not have Radius Setup, is this a requirement or can ... permissions to read the ... >to write to the Active Directory record. ... Expand Computer Configuration, expand Windows ...
      (microsoft.public.win2000.ras_routing)
    • Re: Moved to WDS from RIS, most basic feature missing?
      ... NOrmal way we auto create the PC account is to prestage in Active Directory with the machine's GUID. ... In RIS i would choose Custom Setup on brand new ... Where is the computer name box is WDS? ...
      (microsoft.public.windows.server.setup)