RE: Uninstall Outlook?

From: Chris Lynch, MCSE CCNAv2 (lynch00_at_msn.com)
Date: 07/18/01

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yes, this is true, but you can "filter" with groups. If you apply a
GPO at any level, you need to make sure the APPLY POLICY is not
checked and also the DENY is also not checked. If you do checkmark
DENY, the users that belong to that group will not have that GPO
applied. It is better to remove EVERYONE and specify only the groups
you do want to have the policies applied to.

Let me know if anyone has questions regarding this.

BTW, is the *THE* CTR from Anandtech Forums?

Chris Lynch, MCSE CCNAv2
lynch00_at_msn.com
 

- -----Original Message-----
From: Forman, Justin (Justin)** CTR ** [mailto:jforman_at_lucent.com]
Sent: Tuesday, July 17, 2001 11:02 AM
To: 'carsten.schuette_at_hitcon.de'; security-basics_at_securityfocus.com
Subject: RE: Uninstall Outlook?

For instructions on manually removing Outlook Express from Windows
2000, see MS Knowledge Base article Q257824 at:

http://support.microsoft.com/support/kb/articles/Q263/8/37.ASP?LN=EN-U
S&SD=g
n&FR=0&qry=uninstall&rnk=20&src=DHCS_MSPSS_gn_SRCH&SPR=OEX

To deny running the program, edit Group Policy. Navigate to User
Configuration, Administrative Templates, System, Don't run specified
Windows applications, enable this setting and enter Outlook Express
as one of the applications to deny running. Group Policy can be
applied to Sites, Domains, or Organizational Units, but not to a
group, like Domain Users. So if it applies to the entire enterprise,
apply it at the Site or Domain levels.

I hope this helps!

Sincerely,
Justin Forman, MCSE

- -----Original Message-----
From: carsten.schuette_at_hitcon.de [mailto:carsten.schuette_at_hitcon.de]
Sent: Tuesday, July 17, 2001 5:23 AM
To: security-basics_at_securityfocus.com
Subject: Uninstall Outlook?

Hi all,

for security reasons i'd like to uninstall MS Outlook Express on
Windows 2000 Pro machines, or at least deny to start the program for
domain users. Is there a way?

bye, Carsten.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBO1XpYwsvmhohONWyEQL1WQCfRs0tOEKzFGRb+zubNzx5JwVBOH8AoI53
Uxe+RgUnooVlxT0sJBWQX+8b
=H+gl
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: hiding contacts from directory search (LDAP)
    ... policy and denying that right on the policy. ... the majority that I want to deny makes up about 80-90%. ... account opens up outlook express, he/she can view all the contacts by ...
    (microsoft.public.windows.server.active_directory)
  • Re: most restrictive or least?
    ... >makes sense as far as deny goes. ... group is a user in SQL ... >2) domain users can SELECT some tables ... >Server) to be just like the above but have UPDATE on one ...
    (microsoft.public.sqlserver.security)
  • Re: Creating custom form and sending as an e-mail
    ... Sue Mosher, Outlook MVP ... The manager will either approve or deny. ... > in the response and click on a send button? ...
    (microsoft.public.outlook.program_forms)
  • Re: "Domain Admins", user account and privileges
    ... group) also be a part of the "domain users" group?Yes, and will be by default since practically all users of the domain ... Avoid DENY permissions in general, ... and FC to Admins in no way restricts the admins. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent Users from accessing the Global Address List
    ... "Paul Landregan" wrote: ... >accessing the Global address list in Outlook and provide them with their own ... >Create a security group containing the users in question. ... >the security tab I added the group of users I wish to deny. ...
    (microsoft.public.exchange.setup)