Software Restriction Policies

Hi!

I'm trying to optimize the logon time of the laptops of my network

The scenario is the following:

We are using Software restriction Policies applied by machine group
policy. The problem is that this policy is plenty of hashes... more
than a thousand entries... The policy weight is about 3,5 Mb! The logon
time is about 10/20 minutes depending on the CPU of the laptop...

The solution that I have thought is to change the policy from machine
policy to user policy, that way the application of the policy can be
made asinchronously while the user logs on the network.

Now comes the question:

Is there any way to "migrate" the entries definied in the Computer
software restriction policy to the User software restriction policy?

I don't know if somebody else have had the same problem... if so, the
solution is correct?

Sorry for my english... :)

.

Relevant Pages

  • Re: Force logoff
    ... This DOES NOT log the user off the network, ... accessing anything on the network after the "logon time" expires. ... > However, if this policy is working on other machines, it is already set. ...
    (microsoft.public.win2000.networking)
  • Safer
    ... support the software restriction policies themselves. ... The default policy is to ... // Set safer level parameter passed ... // Delete previous safer entry for the program ...
    (microsoft.public.scripting.jscript)
  • Re: How to Remove Software Restriction?
    ... Hopefully you created the software restriction in it's own policy... ... HASH to work on an application... ... policy and create a new one in a GPO that is applied to the entire OU. ...
    (microsoft.public.win2000.active_directory)
  • Re: run only allowed windows applications
    ... You can still use software restriction policies to do this on Windows 2000. ... -Make sure drives are formatted NTFS ... -Set a default software restriction policy to disallow all applications. ... You should also look at the policy to prevent Registry Editing tools ...
    (microsoft.public.win2000.group_policy)
  • Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass
    ... This MS answer speaks volumes to their approach to security (I had ... "Software Restriction Policy and Group Policy are not meant to be ... "...Software restriction policies are a part of Microsoft's security ...
    (Full-Disclosure)