Re: deny access to users trying to install s/w on NT4 workstations

• Previous message: Asheesh Laroia: "Re: NT 4 / W2K Password Extraction"
• In reply to: Nyki Clarke: "Re: deny access to users trying to install s/w on NT4 workstations"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: Asheesh Laroia <pan-news@asheeshenterprises.com>
Date: Wed, 27 Mar 2002 20:22:10 GMT

Well, it's difficult to do this when any user can get full administrative
provileges anyway (http://www.everything2.com/?node=debploit) by the
recently-released DebPloit, that runs against all Win2K and WinNT
machines. XP is not vulnerable.

(Consider patching your systems, as described in the exploit's ZIP file.)

-- Asheesh.

On Thu, 21 Mar 2002 10:09:03 -0500, Nyki Clarke wrote:

> oops I was being silly......sorted now.
>
>
> "Nyki Clarke" <nyki.clarke@SPAMMENOTsanmina-sci.com> wrote in message
> news:JGkm8.3646$y17.675644@news2-win.server.ntlworld.com...
>> Hi
>>
>> looking for a bit of help denying users access to install apps on their
>> local drives. Implemented Policies and have set all the security on
>> directories apart from Program files at the moment to RX or special
>> access as required. Can't tie down program files in that manner as
>> some apps
> need
>> to update files held within those directories. Ordinary users are not
>> members of Workstation Admins. Any idea of the registry keys I need to
> look
>> at to prevent installations? Or does anyone have a script I can add in
>> as
> a
>> policy template? I have the NT Audit Security and Control book but not
>> found the relevant item yet.
>>
>> Grateful for any suggestions.
>>
>> ta
>>
>> Nyki
>>
>>

• Next message: Eric Fitzgerald [MSFT]: "Re: Audit Failures/READ_CONTROL SYNCHRONIZE"
• Previous message: Asheesh Laroia: "Re: NT 4 / W2K Password Extraction"
• In reply to: Nyki Clarke: "Re: deny access to users trying to install s/w on NT4 workstations"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]