No, Its not possible, there is no policy else you can create a group and
provide the rights and permissions or you can use local secrurity to deny
registry access for those users whom you dont want to give the access of
running setup

Regards
Mahaveer saraswat
(Sr.Systems Engineer)
http://net4domains.com

----- Original Message -----
From: "Simon Taplin" <simont (at) pop.co (dot) za [email concealed]>
To: <focus-ms (at) securityfocus (dot) com [email concealed]>
Sent: Saturday, January 10, 2004 10:46 PM
Subject: Active Directory Question

> Is is possible to setup a policy on Win2000 Active Directory whereby you
can
> use wildcards to deny users access to running certain programs, for
example
> blocking userss running setup*.*
>
> Thanks
> Simon
>
> ---
> This email is hopefully virus free as it has been
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.558 / Virus Database: 350 - Release Date: 2004/01/02
>
>
>

------------------------------------------------------------------------
----
----

> ------------------------------------------------------------------------
--
-
> ------------------------------------------------------------------------
--
-

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]