If you use hashes no, but only in Windows 2003 or installing third party products like Secuware
Regards.
-----Original Message-----
From: Tomasz Onyszko [mailto:T.Onyszko (at) w2k (dot) pl [email concealed]]
Sent: Mon 12/01/2004 21:46
To: Gallego Martinez, Javier
Cc: Philip Wagenaar; simont (at) pop.co (dot) za [email concealed]; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: Betr.: Active Directory Question
Gallego Martinez, Javier wrote:
> In Windows 2003 Active Directory, using group policies, you can limit the execution of certain extension files, one executable with his absolute path or one executable with his hash (great funcionality but in practice, Microsoft supports around 500 hashes....)
> Regards,
>Yes but when You change filename they are out of scope of this GPO
>
--
Tomasz Onyszko - T.Onyszko (at) w2k (dot) pl [email concealed]
Regards.
-----Original Message-----
From: Tomasz Onyszko [mailto:T.Onyszko (at) w2k (dot) pl [email concealed]]
Sent: Mon 12/01/2004 21:46
To: Gallego Martinez, Javier
Cc: Philip Wagenaar; simont (at) pop.co (dot) za [email concealed]; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: Betr.: Active Directory Question
Gallego Martinez, Javier wrote:
> In Windows 2003 Active Directory, using group policies, you can limit the execution of certain extension files, one executable with his absolute path or one executable with his hash (great funcionality but in practice, Microsoft supports around 500 hashes....)
> Regards,
>Yes but when You change filename they are out of scope of this GPO
>
--
Tomasz Onyszko - T.Onyszko (at) w2k (dot) pl [email concealed]
http://www.w2k.pl
[ reply ]