Re: Active Directory Question

From: Tomasz Onyszko (T.Onyszko_at_w2k.pl)
Date: 01/12/04

  • Next message: velmurugan.a_at_wartsila.com: "RE: Betr.: Active Directory Question" 
    Date: Mon, 12 Jan 2004 21:40:53 +0100
To: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>

    Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
    > Why not just set them up as plain "users" and thus they can't install
    > programs anyway?

    I think that this "setup*" file was only an example and Simon wants
    restric his users form running several apps i general, not only from
    installing them.
    Windows 2000/Xp/2003 with GPO givs an administrator some tools for that
    but they are IMHO not very usefull (for example just copy cmd.exe to
    cmd1.exe and it will be out of scope of GPO) so I think that ACL's are
    now the best way to control users access to applications. 

    -- 
Tomasz Onyszko - T.Onyszko@w2k.pl
http://www.w2k.pl
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: velmurugan.a_at_wartsila.com: "RE: Betr.: Active Directory Question"