Re: Alerts on Application Launch

In news:1163516281.735548.33250@xxxxxxxxxxxxxxxxxxxxxxxxxxx,
jmiddleton <jmiddleton@xxxxxxxxx> typed:
Hi. I'm hoping someone can help me with figuring out a solution to a
problem I have. We have many users who are set as Local Admins on
their computers (for different purposes but they all have valid
reasons to have it). I would like to find a small solution that
would simply pop up an alert when the user ran any application that
they were not supposed to run. It would be a simple warning that
would say, "Here's our policy and if you would like to install
anyway, click OK". And then I would like it to either log this or
email it.

I'm sure that there is something out there that can do this but I have
yet to find it. Any help would be greatly appreciated. Thanks.

-Jesse

I can't think of any way to do this, but I'll bet there's a workaround for
your users 'needing' admin rights (so you can stop them from installing
stuff they aren't supposed to). There is *rarely* a situation you will
encounter that absolutely requires it....FileMon and RegMon from
www.sysinternals.com should help you find out where your errant software
expects to write to in the file system & registry. And complain to any
software developer whose product 'requires' admin rights to run.

Beyond that, you ought to look into group policy "Software Restriction"
settings for controlling access to applications installed on the
workstation. You can set up a list of allowed applications therein. Be very
careful that you don't lock yourself (or admins!) out when you do this, tho.


.

Relevant Pages

  • Re: Local admin user rights on remote DC
    ... admins group just to do that function and then remove them. ... Group Policy to deny their user accounts to specific mmc snapins they do not ... Software Installation to "assign" those packages to the domain controllers. ... > not install any software specific for the site (like antivirus, ...
    (microsoft.public.windows.server.security)
  • Re: Manifest File - Installs in Vista
    ... C:\Program Files was that it was the correct place for admins to install ... An Access front-end is arguably a program. ... Common_Appdata folder. ...
    (microsoft.public.access.modulesdaovba)
  • Re: MS04-015 patch
    ... as you state they are admins is something to figure. ... If you have a server with IIS, install Sus and point ... Microsoft MVP (Windows Server System: ... > install the patch for MS04-015? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Creating an app that runs as admin
    ... to be corporate workstation installs. ... by corporate employees, which is good for the admins, ... While on a SOHo system an all-user install ...
    (microsoft.public.vb.general.discussion)
  • restricting acces to certain admins
    ... a certain group of admins should be able to install and administer ... the network components incl. ... Admins is too much, Power Users doesn't help and I couldn't find Group ... The only setup that I have found so far is creating an admin-group ...
    (comp.os.ms-windows.nt.admin.security)
Quantcast