Re: Restrict Applications

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/24/05

  • Next message: Roger Abell: "Re: WSUS and SelfUpdate" 
    Date: Thu, 23 Jun 2005 21:20:43 -0700

    You would likely want to define a new GPO, in group policy.
    You can search on either SAFER or Software Restriction Policy.
    A good place for overview and detail on use of group policy is
    http://microsoft.com/gp 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Jardyus" <yussil AT juno DOT com> wrote in message
news:%23x6J9UDeFHA.2128@TK2MSFTNGP14.phx.gbl...
> You are correct, in your assumption, and the client machines are XP. Can
you
> point to the location of the GPO. I cannot seem to find it in Computer
> Config. Thanks.
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:O3DLwGDeFHA.688@TK2MSFTNGP14.phx.gbl...
> >I am assuming you mean allow or disallow specific applications
> > for use on specific machines, rather than configure a specific box
> > to use a specific application as its shell and only executed
application.
> >
> > If those client machines are XP then you could apply Software
> > Restriction Policy via a GPO that has only the intended machines
> > in its scope such as a GPO linked to the OU containing only those
> > machines.  As Software Restriction Policy is not a W2k feature
> > you would find managing the settings of this GPO most convenient
> > when done from a W2k3 or XP machine.
> >
> > -- 
> > Roger Abell
> > Microsoft MVP (Windows  Security)
> >
> > "Jardyus" <yussil AT juno DOT com> wrote in message
> > news:%234uCmdCeFHA.3620@TK2MSFTNGP09.phx.gbl...
> >> I am running a Windows 2000 domain. I would like to know if it is
> >> possible
> >> to configure specific computers to run or not run an application. I do
> >> not
> >> want this to apply to the entire domain, rather to select machines. If
> >> anyone knows of a way to do this please let me know. Thanks.
> >>
> >>
> >
> >
>
>
  • Next message: Roger Abell: "Re: WSUS and SelfUpdate"

    Relevant Pages

    • Re: Restrict Applications
      ... If those client machines are XP then you could apply Software ... Restriction Policy via a GPO that has only the intended machines ... Microsoft MVP (Windows Security) ...
      (microsoft.public.win2000.security)
    • Re: DST Updates Deployed via Group Policy
      ... if they are just reg settings and nothing more then ... WAS able to select the group in the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
      (microsoft.public.windows.group_policy)
    • Re: DST Updates Deployed via Group Policy
      ... In KB914387 Microsoft gives you the registry keys that need to be changed ... saw that my EST reg entries were the same as my 2003 server and 2000 ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ...
      (microsoft.public.windows.group_policy)
    • Re: DST Updates Deployed via Group Policy
      ... Aren't these "patches" for XP and 2003 just the same registry ... WAS able to select thegroupin the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
      (microsoft.public.windows.group_policy)
    • Re: Basic Sec Template Design
      ... defined in a GPO linked to the domain object to impact domain accounts ... allowed to impact machines then these impact the machine local ... Have you also reviewed the security guides? ...
      (microsoft.public.windows.server.security)