Re: Can we really block users from installing applications through Group policy?

From: Miroslaw Slawek Chorazy (mchorazy_at_depaul.edu)
Date: 10/08/04

  • Next message: Igor.Panassiouk_at_kvazar-micro.com: "RE: MS ISA activeX Filtering" 
    Date: Fri, 08 Oct 2004 11:51:06 -0500
To: <focus-ms@securityfocus.com>, <cyz2000@yahoo.com>

    Blocking users from installing applications is really a comprehensive
    group of related policies not limited to just Group Policy Objects.
     
    Some of them are;
    1. User rights on the local computer
    2. ACLs on Directory Sturctures
    3. ACLS on Registry Hives ( especifically HKLM and HKCR )
    4. Software Restriction Policies or simmilar blocking mechanism
     
    Slawek

    >>> chang zhu <cyz2000@yahoo.com> 10/8/2004 07:45 >>>
    Hi, all

    The users are not local administrators. We configure
    group policy to prevent user installs but it seems
    that it blocks only .msi packages. Users still can
    install applications through ex. setup.exe...Can we
    really block users from installing applications
    through Group policy?

    Any idea or thoughts on this?

    Plus, if we need to block users from saving .mp3 file
    on their computers, can we do it through group policy?

    we are on windows2000 and XP environment.

    Thanks always,

    Chang

            
    _______________________________
    Do you Yahoo!?
    Declare Yourself - Register online to vote today!
    http://vote.yahoo.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Igor.Panassiouk_at_kvazar-micro.com: "RE: MS ISA activeX Filtering"

    Relevant Pages