Re: Prevent Word Pad from saving docs?
From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/22/02
- Next message: Jerry Benton: "Reinstalling Win2k causes security snafus on old files"
- Previous message: Karl Levinson [x y] mvp: "Re: Reinstalling Win2k causes security snafus on old files"
- In reply to: Jason Garms [MS]: "Re: Prevent Word Pad from saving docs?"
- Next in thread: Tom F: "Re: Prevent Word Pad from saving docs?"
- Reply: Tom F: "Re: Prevent Word Pad from saving docs?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <levinson_k@excite.com> Date: Fri, 22 Nov 2002 00:44:14 -0500
Your post made me remember one other thing... if Windows was installed onto
a FAT partition and later converted to NTFS, the file permissions are not
secure and you will want to re-apply the default group policy templates.
I'm not positive, but the same thing could possibly be true if Windows 2000
was installed on a pre-existing NTFS partition such as if Windows NT or 2000
was already installed once on the system. More info:
http://securityadmin.info/faq.htm#4.42
"Jason Garms [MS]" <jasong@microsoft.com> wrote in message
news:e02c01c29163$650177a0$89f82ecf@TK2MSFTNGXA01...
> Hi Brandon,
>
> Karl's recommendation is definately on the right track.
> Also, it's worth noting that when you do a clean install
> of Win2k Pro on an NTFS file share, the file permissions
> are pretty well layed down (even better on WinXP Pro,
> which i'd strongly recommend using as well). You want to
> let the users logon using the Guest account, or as members
> of the guest group. One reason for this is when the user
> logs out, the system automatically removes the user's
> profile, which includes My Documents. This happens
> automatically for members of the guest group. I think
> there's a KB about this somewhere. You also want to make
> sure the INTERACTIVE pseudo-group is NOT a member of the
> local POWER USERS group. You can lock down further by
> removing it from the USERS group, but app compat will be
> even worse. However, if all you want to do is WordPad and
> print, this might not be an issue.
>
> good luck!
> -jasong
>
> Best,
> -jasong
>
> >-----Original Message-----
> >Briefly, I think the answer is Novell and Windows NTFS
> file permissions on
> >the files in question, and use the Group Policy MMC to
> lock down what the
> >users can see on the windows computers.
> >
> >Also, I'm pretty sure I've seen other third party
> software on, say, a
> >library kiosk that successfully monitored and blocked
> access to key
> >sensitive system files.... maybe Fortress isn't the only
> product you need?
> >Surely there must be other insecure public institutions
> that are doing the
> >same thing you are doing and can provide recommendations.
> >
> >"Brandon Brown" <blbrown@co.jefferson.co.us> wrote in
> message
> >news:c94801c290f0$badd95f0$8df82ecf@TK2MSFTNGXA02...
> >> I'm overseeing a network using W2K Pro. (server & user)
> on
> >> a Novell 5.1 platform in a secure facility (jail) that
> has
> >> intentionally distructive users. I want to offer word
> >> processing and "Word Pad" seemed to be a good fit.
> User's
> >> must print their work prior to exiting program and our
> >> security software "Fortres Grand 4.1" works great for
> >> items on the desk top but does not prevent them from
> >> saving to the "C" or other drives when they are in Word
> >> Pad or other software programs. What's worse it even
> >> prompts them (Save window accessed when exiting and/or
> >> pulling down file/ "save" or "save as") that they can
> view
> >> and modify/delete server, Novell and system files. I
> have
> >> looked at making docs "read only" and even "hidden"
> files
> >> and "played" with other permissions/rights but these
> cause
> >> other programs not to operate properly.
> >> I have concluded that all word processing programs will
> >> ultimately end up offering the user the option / view of
> >> areas they can save their work to . . . which means
> death
> >> to my network.
> >> Does anyone know a way to make Word Pad docs only
> >> printable from the desktop ("save window/menu" does
> >> not "pop up" allowing modifification . . . or
> >> Change documents from Word Pad to "other format"
> (NotePad
> >> also has "pop up" save window) again allowing them to be
> >> placed on the desktop and only be printed but not
> >> modified.
> >
> >
> >.
> >
- Next message: Jerry Benton: "Reinstalling Win2k causes security snafus on old files"
- Previous message: Karl Levinson [x y] mvp: "Re: Reinstalling Win2k causes security snafus on old files"
- In reply to: Jason Garms [MS]: "Re: Prevent Word Pad from saving docs?"
- Next in thread: Tom F: "Re: Prevent Word Pad from saving docs?"
- Reply: Tom F: "Re: Prevent Word Pad from saving docs?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
