Software Restriction Hash does not prevent local admin installs
Date: Fri, 20 Feb 2004 23:39:29 -0500
Using group policy, I set up a new machine policy to prevent ANY user to
install some software I generated a Hash for.
The policy does prompt the user that they can not install the applicaiton,
but the local administrator still can.
I set the all user option, not the "all users except admins"
Why doesn't this policy also get applied to the local admin?
Relevant Pages
- Re: Further Questions on Adding group to local administrators group via GPO
... There are multiple ways of achieving the result required, and it depends if you want to install it for all users on certain machines or for all machines for certain users. ... you need to create a policy and go to the Software section of the machine component and create the install package. ... you do not require Local Admin rights to get the installation of the Software to work.. ...
(microsoft.public.windows.server.sbs) - Re: Question on software install and event log security
... to install software continuously throughout the day. ... The policy only allows. ... > those packages to be installed without the user being local administrator. ... >> However by adding them to the local administrator group they are allowed ...
(microsoft.public.windows.group_policy) - Re: Terminal Server with SBS 2K3
... I am not sure how you configure your SBS fax, does the issue occur on every ... Do normal users try to install a network printer? ... Have you installed the Windows 2003 printer driver on ... |> "Prevent users from adding printers" group policy in the default domain ...
(microsoft.public.windows.server.sbs) - Re: Using SUS to deploy patches, how to hide Windows update icon
... all notifications to users and doing silent installs. ... There are certain pros and cons to using this policy setting, ... If you set AU configuration to 4 (scheduled install) in the AU policy, ... reboot, but will not be able to postpone the reboot. ...
(microsoft.public.windowsupdate) - Re: Possible security issue??
... I suppose that Group Policy could also be applying some file system ... unjoin your computer from the domain, reboot, and try to install the same ... I could only run it from the administrators (domain) ...
(microsoft.public.win2000.security) |
|
