Software Restriction Policy

From: Philip Wang (genesis_beta_at_yahoo.com)
Date: 01/13/04 

Date: Mon, 12 Jan 2004 18:41:11 -0800

Hi, I came across a document on Software Restriction
Policy and it is mentioned that

"Software restriction policies utilize two different
rules - either 'unrestricted' or 'disallowed'. By using
the 'unrestricted' rule, you are allowing all programs to
execute (or install) except for the ones that you
specify. By using the "disallowed" rule, you are blocking
all programs from being executed (or installed), except
for ones that you have specifically allowed."

I have tried to apply it to a test Win XP PC to see if
normal user can install application and apparently it does
not work.. so is there a way we can allow normal user to
install applications or patch hot fixes on their own Win
XP PC without giving them Administrator rights? It seems
that software restriction is merely used for restricting
software or application from running...

Best Regards.
Philip

Relevant Pages

  • Re: Software Restriction Policy
    ... You can only allow programs to execute that a user would normally be able to execute ... --- Steve ... I came across a document on Software Restriction ... > normal user can install application and apparently it does ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Restrict Users From installing Applications
    ... A very good way to secure your TS is to use Software Restriction ... You can achieve the same by using a combination of NTFS permissions ... and registry permissions. ... hardly install any programs at all. ...
    (microsoft.public.windows.terminal_services)
  • Re: Windows 2003 Server, access denied to install security patches
    ... Have you logged onto the domain controller and run rsop.msc from the command ... line just to verify that there really no software restriction policies ... > As the Systems Administrator I have full rights to install windows update ... > security patches to a Domain Controller with Windows Server 2003. ...
    (microsoft.public.windows.group_policy)
  • Re: XP Pro - software restriction turned on but not by me - help
    ... message "Application cannot be opened due to Software Restriction Policy...." ... Security policy section and no policy was set. ... using the Install CD to do a Repair; I have also installed as an Upgrade but ... Kaspersky Online Scanner http://www.kaspersky.com/virusscanner ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Software Restriction Policies - Question
    ... able to install said software. ... I haven't looked at the software restriction policies yet, ... >> I like to build a software restriction policy that prevents all users ...
    (microsoft.public.win2000.group_policy)