Re: Restrict Install Privelidges

From: Drew Cooper [MS] (dcoop@online.microsoft.com)
Date: 11/27/02 

From: "Drew Cooper [MS]" <dcoop@online.microsoft.com>
Date: Tue, 26 Nov 2002 18:19:44 -0800

The users must already be members of the local administrators group on their
respective machines. Moving them to a different group will restrict their
abilities to install infected garbage. It will also affect their ability to
install useful apps, though - it's a tradeoff.
Sounds like moving the users into different groups is the solution to your
problem, though.

If you have specific questions about the way any of the security settings
work, post specific questions to this newsgroup and we'll do our best to
answer them. 

--
Drew Cooper [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Douglas Taylor" <DouglasT@musa.com> wrote in message
news:187a001c29596$2802a450$8af82ecf@TK2MSFTNGXA03...
> After spending all of last week cleaning out the damage
> from a W32/Klez.h@MM and W32/Elkern.cav infection, my
> employer is now agreeing with me that certain security
> precautions should be taken.  The first step in my mind
> would be to restrict the installation permissions of the
> basic user (I'm getting tired of finding GameHouse Mahjong
> Tiles on J. Doe's computer).
>
> I've played around a little with the groups, but am still
> having a little bit of trouble.  Is there any other
> reliable way of restricting permissions of users?  I'm a
> bit new at this.
>
> Thanks,
> Doug

Relevant Pages

  • Re: how do i move progam files on disk c: into another disk
    ... As many of us have told you, simply moving them is a *bad* idea, even with ... the other drive and install the programs to it. ... folder and cannot be moved even if you install the programs elsewhere, ... i thing i read this message when install window, on produce, on ...
    (microsoft.public.windowsxp.general)
  • Re: Office 2003 Compatibility with Office 2007
    ... moving from 2003 to 2007 shouldbn't generate hassels. ... YOu should have received the information about news group access ... unsolicited mail sent to my personal account will be deleted without ... When I come to install these pieces of ...
    (microsoft.public.office.misc)
  • Re: What Linux distro to use for old Intel machine, that fits on CDs?
    ... faster download speeds from this site". ... click install is what you want then either the Fedora 9 or Ubuntu Live CDs ... if LiveCD supports a dialup modem, ... I'll just reinstall Windows 2000 on this old system and maybe restrict ...
    (comp.os.linux.misc)
  • Re: Novell hits homerun
    ... should keep Novell from being sued by someone in the entertainment industry. ... If you write s..t, write shit, or don't write it at all. ... In no way doe SUSE attempt to restrict you to install anything. ...
    (alt.os.linux.suse)
  • Re: Moving XP to new computer
    ... you will have to reactivate the machine. ... there really isn't a problem with moving the drive right ... internet just fine for ya. ... fresh install. ...
    (microsoft.public.windowsxp.help_and_support)