Re: Software Restriction Policy
From: rasdr (bogus.email_at_bogusaddress.com)
Date: 11/03/05
- Next message: maugermauger: "Re: Generic Host Process error message"
- Previous message: Steven L Umbach: "Re: Setting Permissions on XP Home"
- In reply to: Steven L Umbach: "Re: Software Restriction Policy"
- Next in thread: Rhonda Rasmussen: "Re: Software Restriction Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 2 Nov 2005 21:28:57 -0600
Thanks for the suggestion....I'll give it a shot at work tomorrow.
"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:rMCdnVr9rv7h5PTeRVn-jw@comcast.com...
> What you might try to set up a test computer that has very restrictive
> settings for Software Restriction Policies such as one with the default
> disallowed rule [and you may need to lockdown from there] and then try to
> install Real Player on it as a regular user assuming that is what your
> general user population is to have a similar user experience. When the
> installation fails look in the application log to see the name of the
> executable that was denied and try creating a hash rule for that file. One
> of my computers is locked down pretty tight so I tried to download and
> install Real Player and this is what I found in the application log
> indicating that
> RealPlayer10-5GOLD_bb[1].exe may be a file to try and restrict. --- Steve
>
> Event Type: Warning
> Event Source: Software Restriction Policies
> Event Category: None
> Event ID: 866
> Date: 11/2/2005
> Time: 8:00:28 PM
> User: N/A
> Computer: STEVE-XP
> Description:
> Access to D:\Documents and Settings\Steve\Local Settings\Temporary
> Internet Files\Content.IE5\6789SBCV\RealPlayer10-5GOLD_bb[1].exe has been
> restricted by your Administrator by location with policy rule
> {dd369e61-f6f5-4e21-8ce3-58c8257ddc15} placed on path D:\Documents and
> Settings\
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> "rasdr" <bogus.email@bogusaddress.com> wrote in message
> news:11miojuea6oc918@corp.supernews.com...
>> We have some software restriction policies on our domain which disallow
>> users from running chat software, some of our prohibited software list,
>> as well as games. We were attempting today to add a hash for the
>> installer file for Real Player 10, which we don't want users in the
>> domain installing on their workstations (if they have admin privileges).
>>
>> We're finding that the hashes for the executable that runs a program (ie:
>> realplay.exe) work just fine, but we're unable to restrict the installer
>> file from running. It's as if the has rule is totally ignored.
>>
>> Does anybody have any suggestions as to what might be the reason for
>> this?
>>
>
>
- Next message: maugermauger: "Re: Generic Host Process error message"
- Previous message: Steven L Umbach: "Re: Setting Permissions on XP Home"
- In reply to: Steven L Umbach: "Re: Software Restriction Policy"
- Next in thread: Rhonda Rasmussen: "Re: Software Restriction Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|