OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Can we really block users from installing applications through Group policy?

From: Tibor Veres (tibor.veresgmail.com)
Date: Fri Oct 08 2004 - 12:55:18 CDT


can't you just block running any file not owned by Administrator and a
few other trusted users?

On Fri, 8 Oct 2004 11:56:09 -0300, Augusto Paes de Barros
<apbarrosgmail.com> wrote:
> Yes, through ACLs on registry keys like "Software". IF the users
> have only read only access on some of them installation packages won't
> work. However, remember that a lot of software don't need a "formal"
> installation process. You can play with the ACLs on the Program Files
> folder too, but I believe that it might break some apps.
>
> Regards,
>
>
>
>
> On Fri, 8 Oct 2004 05:45:31 -0700 (PDT), chang zhu <cyz2000yahoo.com> wrote:
> > Hi, all
> >
> > The users are not local administrators. We configure
> > group policy to prevent user installs but it seems
> > that it blocks only .msi packages. Users still can
> > install applications through ex. setup.exe...Can we
> > really block users from installing applications
> > through Group policy?
> >
> > Any idea or thoughts on this?
> >
> > Plus, if we need to block users from saving .mp3 file
> > on their computers, can we do it through group policy?
> >
> > we are on windows2000 and XP environment.
> >
> > Thanks always,
> >
> > Chang
> >
> >
> > _______________________________
> > Do you Yahoo!?
> > Declare Yourself - Register online to vote today!
> > http://vote.yahoo.com
> >
> > ---------------------------------------------------------------------------
> > ---------------------------------------------------------------------------
> >
> >
>
>
> --
> Augusto Paes de Barros, CISSP
> http://www.paesdebarros.com.br
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>
>

--
Tibor Veres
  tibor.veresgmail.com

---------------------------------------------------------------------------
---------------------------------------------------------------------------