Re: RE: Can we really block users from installing applications through Group policy?

From: Laura Robinson (larobins_at_verizon.net)
Date: 10/27/04

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #212" 
    To: Joshua Feek <jfeek@yahoo.com.au>, Paul Aviles <paviles@adjoined.com>, Harlan Carvey <keydet89@yahoo.com>, <focus-ms@securityfocus.com>
Date: Wed, 27 Oct 2004 17:53:37 -0400

    Depending on the application, users indeed cannot install many apps. This isn't related to group policy, however.

    Laura
    >
    > From: Joshua Feek <jfeek@yahoo.com.au>
    > Date: 2004/10/25 Mon PM 11:09:35 EDT
    > To: Laura Robinson <larobins@verizon.net>, Paul Aviles <paviles@adjoined.com>,
    > Harlan Carvey <keydet89@yahoo.com>, focus-ms@securityfocus.com
    > CC: chang zhu <cyz2000@yahoo.com>
    > Subject: Re: RE: Can we really block users from installing applications through Group policy?
    >
    > I guess I am talking about stopping unauthorised
    > applications being installed. Most users do not have
    > the rights to install software based on a users level
    > of access on Windows 2000 and XP.
    >
    > --- Laura Robinson <larobins@verizon.net> wrote:
    > > You've lost me, sorry. Policies can be applied to
    > > any users/computers the administrator selects, and
    > > conversely, *not* applied to any users/computers the
    > > administrator selects. This has nothing to do with
    > > packaging the apps whatsoever. Am I missing your
    > > meaning?
    > >
    > > Laura
    > > >
    > > > From: Joshua Feek <jfeek@yahoo.com.au>
    > > > Date: 2004/10/18 Mon PM 09:13:01 EDT
    > > > To: Laura Robinson <larobins@verizon.net>,
    > > > Paul Aviles <paviles@adjoined.com>,
    > > > Harlan Carvey <keydet89@yahoo.com>,
    > > focus-ms@securityfocus.com
    > > > CC: chang zhu <cyz2000@yahoo.com>
    > > > Subject: Re: RE: Can we really block users from
    > > installing applications through Group policy?
    > > >
    > > > Of course you can though it requires you to
    > > package
    > > > all applications into MSI format and certify using
    > > a
    > > > PKI cert. You then config a GPO to only allow apps
    > > > that are certified by your cert to be installed.
    > > This
    > > > will stop dead every other application
    > > installation.
    > > > You can of course include other certs from verdors
    > > to
    > > > minimise this repackage requirement
    > > >
    > > > --- Laura Robinson <larobins@verizon.net> wrote:
    > > > > Um, I don't recall Harlan saying that the policy
    > > had
    > > > > to be applied to *everyone*.
    > > > >
    > > > > Laura
    > > > > >
    > > >
    > > >
    > > >
    > > >
    > > >
    > > >
    > > >
    > >
    > ___________________________________________________________ALL-NEW
    > > Yahoo! Messenger - all new features - even more fun!
    > > http://uk.messenger.yahoo.com
    > > >
    > > >
    > >
    > ---------------------------------------------------------------------------
    > > >
    > >
    > ---------------------------------------------------------------------------
    > > >
    > > >
    > >
    > >
    >
    >
    >
    >
    >
    > ___________________________________________________________ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #212"

    Relevant Pages

    • Re: When were scanf_s functions introduced?
      ... My knowledge of doing complicated MSI setup apps is fairly limited, ... installers, one that is a "full install" (includes everything and will be ... then the amount of space for the CRT ... the CRT dll MSVCR80.dll? ...
      (microsoft.public.platformsdk.security)
    • Re: Mmmm nobody want to give me an answer here
      ... maintenance tasks because of the choices that were made when it ... Of course if you install windows XP by itself without any ... When in the design of the OS this choice happened and why? ... way to remove everything this apps has installed simply by removing ...
      (microsoft.public.windowsxp.perform_maintain)
    • Re: When were scanf_s functions introduced?
      ... one that is a "web install" (checks dependencies and only downloads those that are missing, ... then the amount of space for the CRT installer is probably not going to matter much and ... the CRT dll MSVCR80.dll? ... Say I have several different apps to deploy. ...
      (microsoft.public.platformsdk.security)
    • Re: Im Pissed Off
      ... Not only do I still use some dos apps., but I like to be able to ... 98 is the need to install drivers for USB devices. ... You could practically crash Win98 just ... have changed computers, cloned it to other hard drives, and done other ...
      (alt.home.repair)
    • Re: New year, clean install, any advantage to having applications on D: instead of C:?
      ... a 20 to 30GB drive D for the majority of your apps and the remaining ... later you say 3 separate disk volumes. ... funny, just check that partition). ... over the "Install From Scratch" alternative. ...
      (uk.comp.homebuilt)