Re: Restrict Applications

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/23/05 

Date: Thu, 23 Jun 2005 13:25:44 -0700

I am assuming you mean allow or disallow specific applications
for use on specific machines, rather than configure a specific box
to use a specific application as its shell and only executed application.

If those client machines are XP then you could apply Software
Restriction Policy via a GPO that has only the intended machines
in its scope such as a GPO linked to the OU containing only those
machines. As Software Restriction Policy is not a W2k feature
you would find managing the settings of this GPO most convenient
when done from a W2k3 or XP machine. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
"Jardyus" <yussil AT juno DOT com> wrote in message
news:%234uCmdCeFHA.3620@TK2MSFTNGP09.phx.gbl...
> I am running a Windows 2000 domain. I would like to know if it is possible
> to configure specific computers to run or not run an application. I do not
> want this to apply to the entire domain, rather to select machines. If
> anyone knows of a way to do this please let me know. Thanks.
>
>

Relevant Pages

  • Re: Restrict Applications
    ... You would likely want to define a new GPO, ... You can search on either SAFER or Software Restriction Policy. ... > You are correct, in your assumption, and the client machines are XP. ...
    (microsoft.public.win2000.security)
  • Re: DST Updates Deployed via Group Policy
    ... if they are just reg settings and nothing more then ... WAS able to select the group in the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... In KB914387 Microsoft gives you the registry keys that need to be changed ... saw that my EST reg entries were the same as my 2003 server and 2000 ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... Aren't these "patches" for XP and 2003 just the same registry ... WAS able to select thegroupin the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: Basic Sec Template Design
    ... defined in a GPO linked to the domain object to impact domain accounts ... allowed to impact machines then these impact the machine local ... Have you also reviewed the security guides? ...
    (microsoft.public.windows.server.security)