Re: Can we really block users from installing applications through Group policy?
From: Augusto Paes de Barros (apbarros_at_gmail.com)
Date: 10/08/04
- Previous message: chang zhu: "Can we really block users from installing applications through Group policy?"
- In reply to: chang zhu: "Can we really block users from installing applications through Group policy?"
- Next in thread: Tibor Veres: "Re: Can we really block users from installing applications through Group policy?"
- Reply: Tibor Veres: "Re: Can we really block users from installing applications through Group policy?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 8 Oct 2004 11:56:09 -0300 To: focus-ms@securityfocus.com
Yes, through ACLs on registry keys like "Software". IF the users
have only read only access on some of them installation packages won't
work. However, remember that a lot of software don't need a "formal"
installation process. You can play with the ACLs on the Program Files
folder too, but I believe that it might break some apps.
Regards,
On Fri, 8 Oct 2004 05:45:31 -0700 (PDT), chang zhu <cyz2000@yahoo.com> wrote:
> Hi, all
>
> The users are not local administrators. We configure
> group policy to prevent user installs but it seems
> that it blocks only .msi packages. Users still can
> install applications through ex. setup.exe...Can we
> really block users from installing applications
> through Group policy?
>
> Any idea or thoughts on this?
>
> Plus, if we need to block users from saving .mp3 file
> on their computers, can we do it through group policy?
>
> we are on windows2000 and XP environment.
>
> Thanks always,
>
> Chang
>
>
> _______________________________
> Do you Yahoo!?
> Declare Yourself - Register online to vote today!
> http://vote.yahoo.com
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>
>
-- Augusto Paes de Barros, CISSP http://www.paesdebarros.com.br --------------------------------------------------------------------------- ---------------------------------------------------------------------------
- Previous message: chang zhu: "Can we really block users from installing applications through Group policy?"
- In reply to: chang zhu: "Can we really block users from installing applications through Group policy?"
- Next in thread: Tibor Veres: "Re: Can we really block users from installing applications through Group policy?"
- Reply: Tibor Veres: "Re: Can we really block users from installing applications through Group policy?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
