*A challange - Group Policy & Lockdown of Software Install Directory -*

From: Morgan (techmorg@yahoo.com)
Date: 07/17/02 

From: "Morgan" <techmorg@yahoo.com>
Date: Wed, 17 Jul 2002 09:30:23 -0700

Okay, here's a stumper that none of us can figure out.
***Maybe >you< can?***

The situation: We are trying to setup group policies for
software control purposes. The group policies work great,
only certain users have certain software available to them
in add/remove programs based on what group policy they are
assigned. No problem there.

The PROBLEM: In order to allow the users to install the
software through the group policy, they must be given
access to the share where the software resides. (If we
deny access, the installer will fail)

We are concerned that if they find out where the share is,
they will copy the software install directory and install
it on other computers. We know that the only way they will
find out where the software is actually residing is by
looking in the registry for the key that contains
the "install location" which will be created after they
install the software initially. Then, they can browse to
that location and grab the software. We can't lock down
the registry because some of our customers are engineers
who need access to their registries.

Anyone have any ideas on how to solve this problem or have
the software directory only accessable during the install
process?

*Any* input would be greatly appreciated!!

Morgan
Network Engineer
techmorg@yahoo.com

Relevant Pages

  • Re: *A challange - Group Policy & Lockdown of Software Install Directory -*
    ... searching the registry you could set permissions on regedit.exe to prevent ... The group policies work great, ... > they will copy the software install directory and install ... > Network Engineer ...
    (microsoft.public.win2000.security)
  • WindowsXP - how can I stop viruses from running their own SMTP engine?
    ... We're running Windows XP on about 350 desktops. ... with our user permissions and group policies, ... allowing a virus to run its own SMTP engine? ... install and manage personal firewalls on each ...
    (microsoft.public.security.virus)
  • RE: XP SP2 Blind install
    ... Microsoft has a pretty decent overview of deploying SP2 enterprise wide on ... As for the group policies, I'd imagine you can play around with those ... alongside the above unattended install of the service pack, ...
    (Focus-Microsoft)
  • Re: group policy question
    ... group policies from our old DC and before using SBS2003 we had all the it ... staff as domain admins. ... the IT staff need to be able to install and maintain user computers. ... > Damian N. Leibaschoff, MS IST, MCSE ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem assigning applications to a single client computer
    ... install any application that has been assigned to it through group policies. ... Perform rsop.msc on the client to see if the policy is applied by the machine. ... Is the machine in the OU the Software Installation policy is linked to? ...
    (microsoft.public.windows.group_policy)