RE: What is the best way to lock a local box on a network?
- From: "Ramsdell, Scott" <Scott.Ramsdell@xxxxxxxxxxx>
- Date: Thu, 30 Aug 2007 09:27:43 -0400
Hi Martin,
Because AD will elevate the user's rights during installation for
assigned and published apps, you can:
1. remove the user from the local admins group, leaving them as a user
2. assign or publish the apps through AD
3. use WSUS to deliver approved (and vetted) patches
Kind Regards,
Scott Ramsdell
-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Martin Tran
Sent: Wednesday, August 29, 2007 10:15 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: What is the best way to lock a local box on a network?
Hi guys, I was wondering the best way to lock a local box. Things such
as,
1. Can't install unauthorized programs.
2. But can install programs/softwares on a list that is acceptable.
I went to gpedit.msc and gone through the options, but everything
seems really cut and dry. For example, If I was to enable an option
to stop users from installing unwanted software and user tries to do
windows update, it wasn't allowed to proceed with the process saying
they needed administration rights to the box.
If you guys can shine some light as I continue to do some trial and
error on this test box, any suggestions would be great and
appreciated!
--
Martin Tran
- References:
- What is the best way to lock a local box on a network?
- From: Martin Tran
- What is the best way to lock a local box on a network?
- Prev by Date: Re: Question about Active Directory and last time user has logged on
- Next by Date: Re: Securing Development in a production environment
- Previous by thread: What is the best way to lock a local box on a network?
- Next by thread: RE: What is the best way to lock a local box on a network?
- Index(es):
Relevant Pages
|
|
