From: Laura Robinson (larobinsverizon.net)
Date: Wed Oct 27 2004 - 16:53:37 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Depending on the application, users indeed cannot install many apps. This isn't related to group policy, however.

Laura
>
> From: Joshua Feek <jfeekyahoo.com.au>
> Date: 2004/10/25 Mon PM 11:09:35 EDT
> To: Laura Robinson <larobinsverizon.net>, Paul Aviles <pavilesadjoined.com>,
> Harlan Carvey <keydet89yahoo.com>, focus-mssecurityfocus.com
> CC: chang zhu <cyz2000yahoo.com>
> Subject: Re: RE: Can we really block users from installing applications through Group policy?
>
> I guess I am talking about stopping unauthorised
> applications being installed. Most users do not have
> the rights to install software based on a users level
> of access on Windows 2000 and XP.
>
> --- Laura Robinson <larobinsverizon.net> wrote:
> > You've lost me, sorry. Policies can be applied to
> > any users/computers the administrator selects, and
> > conversely, *not* applied to any users/computers the
> > administrator selects. This has nothing to do with
> > packaging the apps whatsoever. Am I missing your
> > meaning?
> >
> > Laura
> > >
> > > From: Joshua Feek <jfeekyahoo.com.au>
> > > Date: 2004/10/18 Mon PM 09:13:01 EDT
> > > To: Laura Robinson <larobinsverizon.net>,
> > > Paul Aviles <pavilesadjoined.com>,
> > > Harlan Carvey <keydet89yahoo.com>,
> > focus-mssecurityfocus.com
> > > CC: chang zhu <cyz2000yahoo.com>
> > > Subject: Re: RE: Can we really block users from
> > installing applications through Group policy?
> > >
> > > Of course you can though it requires you to
> > package
> > > all applications into MSI format and certify using
> > a
> > > PKI cert. You then config a GPO to only allow apps
> > > that are certified by your cert to be installed.
> > This
> > > will stop dead every other application
> > installation.
> > > You can of course include other certs from verdors
> > to
> > > minimise this repackage requirement
> > >
> > > --- Laura Robinson <larobinsverizon.net> wrote:
> > > > Um, I don't recall Harlan saying that the policy
> > had
> > > > to be applied to *everyone*.
> > > >
> > > > Laura
> > > > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
> ___________________________________________________________ALL-NEW
> > Yahoo! Messenger - all new features - even more fun!
> > http://uk.messenger.yahoo.com
> > >
> > >
> >
> ---------------------------------------------------------------------------
> > >
> >
> ---------------------------------------------------------------------------
> > >
> > >
> >
> >
>
>
>
>
>
> ___________________________________________________________ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]