Re: *A challange - Group Policy & Lockdown of Software Install Directory -*

From: blaxshep (Jim_Campau@bausch.com)
Date: 07/17/02 

From: "blaxshep" <Jim_Campau@bausch.com>
Date: Wed, 17 Jul 2002 14:35:20 -0400

You could hide the share by making it an administative (share$) share and
prevent copying the directory by making it read only. As for people
searching the registry you could set permissions on regedit.exe to prevent
that from running for all but selected personel.

"Morgan" <techmorg@yahoo.com> wrote in message
news:196c601c22daf$3fd07cf0$19ef2ecf@tkmsftngxa01...
> Okay, here's a stumper that none of us can figure out.
> ***Maybe >you< can?***
>
> The situation: We are trying to setup group policies for
> software control purposes. The group policies work great,
> only certain users have certain software available to them
> in add/remove programs based on what group policy they are
> assigned. No problem there.
>
> The PROBLEM: In order to allow the users to install the
> software through the group policy, they must be given
> access to the share where the software resides. (If we
> deny access, the installer will fail)
>
> We are concerned that if they find out where the share is,
> they will copy the software install directory and install
> it on other computers. We know that the only way they will
> find out where the software is actually residing is by
> looking in the registry for the key that contains
> the "install location" which will be created after they
> install the software initially. Then, they can browse to
> that location and grab the software. We can't lock down
> the registry because some of our customers are engineers
> who need access to their registries.
>
> Anyone have any ideas on how to solve this problem or have
> the software directory only accessable during the install
> process?
>
> *Any* input would be greatly appreciated!!
>
> Morgan
> Network Engineer
> techmorg@yahoo.com

Relevant Pages

  • Re: Error opening & saving attachments in OE6
    ... I fully understand the time difference. ... Yes, it should, done properly...but you'd have to uninstall SP3 before you'd be able to uninstall IE7. ... Afterwards, of course, you'd need to install SP3 again and then all critical security updates released since June 2008. ... Registry Mechanic; RegistryProt 2.0) may have caused the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Error opening & saving attachments in OE6
    ... present up-to-date IE7 proceed smoothly? ... to install SP3 again and then all critical security updates released since ... After that, plenty of missing ... Registry Mechanic; RegistryProt 2.0) may have caused the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: UNINSTALL WMP 10 TOTALLY
    ... It may be for several install attempts. ... Setup version 10.00.00.3802.] ... Adding dependency type 'Definition' to registry. ... SUCCESS: Package 'Windows Media Player'. ...
    (microsoft.public.windowsmedia.player)
  • Re: Error opening & saving attachments in OE6
    ... Registry Mechanic; RegistryProt 2.0) may have caused the ... you're looking at a Repair Install or a format & clean ... Don't worry about iecont.dll and iecontlc.dll being missing with IE7 ... folders created for this purpose. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Error opening & saving attachments in OE6
    ... that or a Repair Install may be your only option. ... uninstalling SP3 and then IE7 should not affect any OE ... After that, plenty of missing ... Registry Mechanic; RegistryProt 2.0) may have caused the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)