Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Re: Can we really block users from installing applicationsthrough Group policy? Oct 08 2004 04:51PM
Miroslaw Slawek Chorazy (mchorazy depaul edu) (1 replies)
Blocking users from installing applications is really a comprehensive
group of related policies not limited to just Group Policy Objects.

Some of them are;
1. User rights on the local computer
2. ACLs on Directory Sturctures
3. ACLS on Registry Hives ( especifically HKLM and HKCR )
4. Software Restriction Policies or simmilar blocking mechanism

Slawek

>>> chang zhu <cyz2000 (at) yahoo (dot) com [email concealed]> 10/8/2004 07:45 >>>
Hi, all

The users are not local administrators. We configure
group policy to prevent user installs but it seems
that it blocks only .msi packages. Users still can
install applications through ex. setup.exe...Can we
really block users from installing applications
through Group policy?

Any idea or thoughts on this?

Plus, if we need to block users from saving .mp3 file
on their computers, can we do it through group policy?

we are on windows2000 and XP environment.

Thanks always,

Chang

_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus