Re: Disabling "Save to FTP" on OFFICE 2000?

From: Javier J (no.mail_at_please.no)
Date: 02/08/05 

Date: Tue, 08 Feb 2005 17:29:20 +0100

In the case of these "secured" PCs, one of the things we use Group
Policy for, is to control the members of the local Administrators group.

The only local admins are "Administrator"; "Domain Admins." and an
account for remote update and access (whose password is closely held).
I've already stated (and gotten a written confirmation) that if the
users are given local administrator privileges, we won't make any claims
about the proposed security solution...

        Any more ideas?

                Javier J

Andrew Mitchell wrote:
> Paul Adare <padare@newsguy.com> said
>
>
>>In article <#uW94WcDFHA.3120@TK2MSFTNGP12.phx.gbl>, in the
>>microsoft.public.win2000.security news group, Javier J
>><no.mail@please.no> says...
>>
>>
>>>Don't worry. Somebody sent me this link:
>>>http://homepages.wmich.edu/~mchugha/w2kfirewall.htm
>>>that shows the way...
>>>
>>
>>Given the fact that the majority of the users are local admins, the
>>above will accomplish exactly nothing. Admin users can simply turn this
>>off.
>
>
> Not if it's applied through a group policy. A domain or OU based group policy
> will over-ride a local policy.
>
> If the user is a domain admin it's a different story.
>
>

Relevant Pages

  • Re: Disabling "Save to FTP" on OFFICE 2000?
    ... Policy for, is to control the members of the local Administrators group. ... > If the user is a domain admin it's a different story. ...
    (microsoft.public.office.misc)
  • Re: Disabling "Save to FTP" on OFFICE 2000?
    ... Policy for, is to control the members of the local Administrators group. ... > If the user is a domain admin it's a different story. ...
    (microsoft.public.win2000.group_policy)
  • GPO Application
    ... there's no policy affecting them after said policy, ... and removing them from the local administrators group (this is an attempt to ... I even remember once within a server 2000 environment I locked down my own ...
    (Security-Basics)
  • Re: Can not Turn off Auto update
    ... I am a Domain admin as well as a local admin on ... > When set via Group Policy, ... > administrators will be able to change the setting using Control Panel. ... >> local administrators group. ...
    (microsoft.public.windowsupdate)
  • Re: Security Filtering does not work correctly in GPO
    ... I am not sure how you set this up but set the doman admin to deny on apply ... In this Policy, there are just user settings configured. ... The domain admin shouln't receive this settings. ...
    (microsoft.public.windows.server.active_directory)