OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: RE: Can we really block users from installing applications through Group policy?

From: Laura Robinson (larobinsverizon.net)
Date: Tue Oct 19 2004 - 15:01:23 CDT


You've lost me, sorry. Policies can be applied to any users/computers the administrator selects, and conversely, *not* applied to any users/computers the administrator selects. This has nothing to do with packaging the apps whatsoever. Am I missing your meaning?

Laura
>
> From: Joshua Feek <jfeekyahoo.com.au>
> Date: 2004/10/18 Mon PM 09:13:01 EDT
> To: Laura Robinson <larobinsverizon.net>,
> Paul Aviles <pavilesadjoined.com>,
> Harlan Carvey <keydet89yahoo.com>, focus-mssecurityfocus.com
> CC: chang zhu <cyz2000yahoo.com>
> Subject: Re: RE: Can we really block users from installing applications through Group policy?
>
> Of course you can though it requires you to package
> all applications into MSI format and certify using a
> PKI cert. You then config a GPO to only allow apps
> that are certified by your cert to be installed. This
> will stop dead every other application installation.
> You can of course include other certs from verdors to
> minimise this repackage requirement
>
> --- Laura Robinson <larobinsverizon.net> wrote:
> > Um, I don't recall Harlan saying that the policy had
> > to be applied to *everyone*.
> >
> > Laura
> > >
>
>
>
>
>
>
> ___________________________________________________________ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------