Re: RE: Can we really block users from installing applications through Group policy?

From: Laura Robinson (larobins_at_verizon.net)
Date: 10/19/04

  • Next message: Jim Harrison (ISA): "RE: Re: Remote connections" 
    To: Joshua Feek <jfeek@yahoo.com.au>, Paul Aviles <paviles@adjoined.com>, Harlan Carvey <keydet89@yahoo.com>, <focus-ms@securityfocus.com>
Date: Tue, 19 Oct 2004 16:01:23 -0400

    You've lost me, sorry. Policies can be applied to any users/computers the administrator selects, and conversely, *not* applied to any users/computers the administrator selects. This has nothing to do with packaging the apps whatsoever. Am I missing your meaning?

    Laura
    >
    > From: Joshua Feek <jfeek@yahoo.com.au>
    > Date: 2004/10/18 Mon PM 09:13:01 EDT
    > To: Laura Robinson <larobins@verizon.net>,
    > Paul Aviles <paviles@adjoined.com>,
    > Harlan Carvey <keydet89@yahoo.com>, focus-ms@securityfocus.com
    > CC: chang zhu <cyz2000@yahoo.com>
    > Subject: Re: RE: Can we really block users from installing applications through Group policy?
    >
    > Of course you can though it requires you to package
    > all applications into MSI format and certify using a
    > PKI cert. You then config a GPO to only allow apps
    > that are certified by your cert to be installed. This
    > will stop dead every other application installation.
    > You can of course include other certs from verdors to
    > minimise this repackage requirement
    >
    > --- Laura Robinson <larobins@verizon.net> wrote:
    > > Um, I don't recall Harlan saying that the policy had
    > > to be applied to *everyone*.
    > >
    > > Laura
    > > >
    >
    >
    >
    >
    >
    >
    > ___________________________________________________________ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jim Harrison (ISA): "RE: Re: Remote connections"

    Relevant Pages