Re: Tighter security
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/14/04
- Next message: Yun xtra: "System Security problem here"
- Previous message: Steven L Umbach: "Re: Can a GPO block the Windows help file"
- In reply to: TJ: "Tighter security"
- Next in thread: TJ: "Re: Tighter security"
- Reply: TJ: "Re: Tighter security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 14 May 2004 01:32:35 GMT
There is no magic place to look. You could use the Security Configuration and
Analysis tool via mmc snapin to run an analysis against the setup security.inf
template to get an idea how close to default you are. The compatws.inf template
basically changes ntfs and registry permissions to be that of a power user without
the extra rights granted to power user. Another alternative is to roll your own
permissions by using the free tools filemon and regmon form SysInternals to view
where permissions are being denied in the log while invoking those programs via runas
with admin credentials while logged onto the computer as a regular users trying to
run the application. When access denied is found you need to modify permissions to
that file/folder/reg key and try again. -- Steve
http://www.sysinternals.com/ntw2k/source/filemon.shtml
http://www.lokbox.net/SecureXP/secAnalysis.asp
"TJ" <anonymous@discussions.microsoft.com> wrote in message
news:9BF6F125-7D12-4386-8888-85A970339160@microsoft.com...
>
> Currently, everyone on their W2k Pro workstations are set as administrators because
they would not be able to run a couple of their applications. Sloppy programming, I
guess, because these are not old programs.
>
> I'm considering applying the compatws security template because I understand I
could take away their administrator status and return to "user" status and folks
could run those applications.
>
> How can I determine the current security template on any given W2k/XP workstation?
It's most likely the default, but I would like to be able to know the exact status.
>
> Thanks.
>
> TJ
- Next message: Yun xtra: "System Security problem here"
- Previous message: Steven L Umbach: "Re: Can a GPO block the Windows help file"
- In reply to: TJ: "Tighter security"
- Next in thread: TJ: "Re: Tighter security"
- Reply: TJ: "Re: Tighter security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|