Re: RE: Can we really block users from installing applications through Group policy?
From: Joshua Feek (jfeek_at_yahoo.com.au)
Date: 10/19/04
- Previous message: Thor: "Re: Interesting thing about ICF and SP2"
- In reply to: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?"
- Next in thread: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 19 Oct 2004 02:13:01 +0100 (BST) To: Laura Robinson <larobins@verizon.net>, Paul Aviles <paviles@adjoined.com>, Harlan Carvey <keydet89@yahoo.com>, focus-ms@securityfocus.com
Of course you can though it requires you to package
all applications into MSI format and certify using a
PKI cert. You then config a GPO to only allow apps
that are certified by your cert to be installed. This
will stop dead every other application installation.
You can of course include other certs from verdors to
minimise this repackage requirement
--- Laura Robinson <larobins@verizon.net> wrote:
> Um, I don't recall Harlan saying that the policy had
> to be applied to *everyone*.
>
> Laura
> >
___________________________________________________________ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Thor: "Re: Interesting thing about ICF and SP2"
- In reply to: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?"
- Next in thread: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|