Re: Stopping Domain users disabling anti-virus services on domain PC's

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/12/04 

Date: Thu, 12 Aug 2004 20:07:44 GMT

I agree with Ms Lanwench, but FYI you can configure security on services in security
policy for domain or Organizational Unit. It would be under computer
configuration/Windows settings/security settings/services I believe. The link below
goes into more detail. Disabling a service is just one example of what a user who is
a local administrator can do.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;256345

"Michael Hewson" <spikeyboy64@hotmail.com> wrote in message
news:OVtmivHgEHA.536@TK2MSFTNGP11.phx.gbl...
> We currently run Sophos Antivirus on our network froma CID - Some of my more
> savvy users have an annoying habit of turning off the Sophos Service from
> the services menu to free up system resources on their local PC's. I would
> like to be able to prevent them from doing this. Is there any way I can do
> this via Group Policy by making that particular service controllable by the
> Domain Admin or the Sophos Sweep Account?
>
> Many Thanks,
>
> Michael Hewson MCP
>
>

Relevant Pages

  • [NT] Insufficient Argument Validation of Hooked SSDT Functions on Multiple Antivirus and Firewalls
    ... Get your security news from a reliable source. ... The vulnerability is fixed in Comodo Firewall Pro 3.0, ... Non-vulnerable products from Sophos are earlier versions of Sophos ... Although neither the vendor nor Core Security has found a means of ...
    (Securiteam)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)
  • RE: [fw-wiz] PIX vs Checkpoint vs Sonicwall vs Netscreen - comme nts?
    ... All NetScreen appliances rely on custom-designed ASICs (Application ... Specific Integrated Circuits) for security policy enforcement. ... supports a finite number of "rules" or "policies". ...
    (Firewall-Wizards)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)