RE: Can we really block users from installing applications through Group policy?

From: Jesse Weigert (weigert_at_gravitec.com)
Date: 10/09/04

  • Next message: Thor: "Re: Can we really block users from installing applicationsthrough Group policy?" 
    To: "'chang zhu'" <cyz2000@yahoo.com>, <focus-ms@securityfocus.com>
Date: Fri, 8 Oct 2004 23:25:35 -0700

    A very easy way to stop users from installing software is to install
    Deepfreeze. It basically locks the hard drive down so that if users do
    install software or make changes to the system, they are reset the next time
    the computer reboots. I have found this to MUCH more effective than any
    Windows policy restriction. I even let users log in as local administrators
    so that I don't have to deal with software incompatibilities with
    permissions. If they hose their system up or get a virus, it is deleted the
    next time they reboot their system.

    -Jesse Weigert

    -----Original Message-----
    From: chang zhu [mailto:cyz2000@yahoo.com]
    Sent: Friday, October 08, 2004 5:46 AM
    To: focus-ms@securityfocus.com
    Subject: Can we really block users from installing applications through
    Group policy?

    Hi, all

    The users are not local administrators. We configure group policy to
    prevent user installs but it seems that it blocks only .msi packages. Users
    still can install applications through ex. setup.exe...Can we really block
    users from installing applications through Group policy?

    Any idea or thoughts on this?

    Plus, if we need to block users from saving .mp3 file on their computers,
    can we do it through group policy?

    we are on windows2000 and XP environment.

    Thanks always,

    Chang

                    
    _______________________________
    Do you Yahoo!?
    Declare Yourself - Register online to vote today!
    http://vote.yahoo.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Thor: "Re: Can we really block users from installing applicationsthrough Group policy?"

    Relevant Pages

    • Update died during install on Windowx XP-(Error 0x80004005: Unspecified error)
      ... Download destination root folder is: C:\WUTemp ... Downloaded file ... Installing SOFTWARE item from publisher com_microsoft ...
      (microsoft.public.windowsupdate)
    • Re: (Somewhat OT) Bittorrent clients
      ... installing software, cleaning out registries, antivirus, firewalls, ... Every time you save a document you are installing it then... ... It's only common sense to use a firewall, ... to run a web server, database server, file server, application server, ...
      (rec.arts.anime.misc)
    • Re: cant run programs.
      ... Are you downloading, running, or installing software? ... Downloading indicates a transfer of a file from some source, ... Installing indicates that you are setting up software for use on the system. ... Associate Expert - WinXP - Expert Zone ...
      (microsoft.public.windowsxp.general)
    • Prohibit Users from installing programs on a PC
      ... >from installing software without the ... >not quite as much with group policies and the Microsoft ... will also mean that should your kids want to go onto the ...
      (microsoft.public.windowsxp.security_admin)
    • Re: EZ GPO?
      ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Always makes me nervous installing free software, especially if it's installing a new service from a lesser known publisher. ... "Darren Mar-Elia" wrote in message ...
      (microsoft.public.windows.group_policy)