RE: Mass deployment of security tools

Gary,

Active Directory can push these apps for you.

Look into "assigning" and "publishing" apps. If you assign the apps,
they are delivered to the users at next login. If you publish the apps,
they can be installed from Add/Remove Programs in the user's Control
Panel.

Apps without .MSIs have to be published, apps with .MSIs can be
assigned. If you have a legacy app without an .MSI, you can use the
WinInstall app from the ValueAdd directory on the Win2000 Server CD to
build an .MSI.

For apps with an .MSI :
1. create a group for intended users
2. create a GPO for pushing the app
3. in the GPO, use the Software Installation policy to assign the .MSI
(obviously, the .MSI will have to be in a properly permissioned share)
4. link the GPO to an OU where your users reside
5. grant read and apply GPO rights to your group from step #1 and
remove authenticated users' apply rights

Best Regards,
Scott Ramsdell

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Gary Collis
Sent: Monday, October 16, 2006 3:19 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Mass deployment of security tools

Hi all,

Forgive me if this is the wrong mailing list, please point me in the
right direction if so.

I have been tasked with a project of installing various security
applications remotely to the desktop, without visiting the individual
PC's i.e. avoiding sneakernet. I was wondering what the best tool out
their is for this task? Group policy? Software restriction policies?
Zen? Altiris? etc. I am open to all suggestions.

(Some background)

I want to install a number of security applications to windows PC's
simultaneuosly either without user intervention ( no user is an
admin/power user etc. ), or by allowing users to install it themselves.
Software ranges from the basic to more complicated specialist apps etc.

What are my best options?

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: Newbie FAQ #2: Wheres the GUI?
    ... Windows is so insecure you can't download and run ... suggesting that most of the windows security features are ... install shrink-wrapped software. ... and zero-install web apps solve that. ...
    (comp.lang.lisp)
  • Publishing Software...
    ... It will install on some and not on others. ... All other apps ... The launch of the setup command for application RAM Base Plate from policy ... The Group Policy client-side extension Security failed to execute. ...
    (microsoft.public.windows.server.sbs)
  • Re: When were scanf_s functions introduced?
    ... My knowledge of doing complicated MSI setup apps is fairly limited, ... installers, one that is a "full install" (includes everything and will be ... then the amount of space for the CRT ... the CRT dll MSVCR80.dll? ...
    (microsoft.public.platformsdk.security)
  • Re: When were scanf_s functions introduced?
    ... one that is a "web install" (checks dependencies and only downloads those that are missing, ... then the amount of space for the CRT installer is probably not going to matter much and ... the CRT dll MSVCR80.dll? ... Say I have several different apps to deploy. ...
    (microsoft.public.platformsdk.security)
  • Re: Im Pissed Off
    ... Not only do I still use some dos apps., but I like to be able to ... 98 is the need to install drivers for USB devices. ... You could practically crash Win98 just ... have changed computers, cloned it to other hard drives, and done other ...
    (alt.home.repair)