Re: Basisverzeichnis/Homelaufwerk: Anwendungen ohne Erlaubnis starten....

From: Nils Kaczenski [MVP] (jensmander20_at_hotmail.com)
Date: 03/15/05 

Date: Tue, 15 Mar 2005 07:47:09 +0100

Moin,

Peter Kesting schrieb:

> Ich dachte evtl. schon an eine RI, die nur startbare Programme
> auflistet.......

wie Bernhard schon sagte, geht das entweder über Software Restriction
Policies (SRP; Feature von 2003/XP) oder besser (sprich: verwaltbar und
reportingfähig, das sind nämlich zwei Probleme der SRP) über
Drittanbieterprogramme, wobei Sanctuary Application Control von
SecureWave meiner Kenntnis nach das sicherste ist.

Gruß, Nils 

-- 
Nils Kaczenski - MVP Windows Server
NEU: www.faq-o-matic.net
Antworten bitte nur in die Newsgroup!
PM: Vorname at Nachname .de
Das MVP-Buch zu Windows XP: http://www.kaczenski.de/content/view/8/27/

Relevant Pages

  • Re: Prevent users from installing software
    ... I want to apply SRP, it can be applied on a W2k DC with clients on a mixture ... users back to Windows 2000. ... In high security situations you can start with a default disallowed ... Note however that local administrators can bypass SRP ...
    (microsoft.public.win2000.security)
  • Re: Why are programs not digitally signed to protect against viruses?
    ... Correct me if I am wrong Steve, but one can also, for example, use ... Microsoft MVP (Windows Server: Security) ... If you are interested in SRP see the link ... >> google, and symantec searches on it, to try and verify its authenticity. ...
    (microsoft.public.security)
  • Re: Prevent users from installing software
    ... if not I will look into applying SRP. ... > users back to Windows 2000. ... >>First off it is extremely difficult to restrict an administrator and you ... Note however that local administrators can bypass SRP ...
    (microsoft.public.win2000.security)
  • Re: Prevent users from installing software
    ... SRP can be configured in a Windows 2000 domain via Group Policy but will ... only apply to XP Pro domain computers. ... > Hi Steve & Danny, ...
    (microsoft.public.win2000.security)
  • Re: Verschiedene Messenger per GPO =?ISO-8859-1?Q?unterdr=FCcken?=
    ... Hier kannst du per Blacklist oder besser per Whitelist vorgeben, ... Die SRP sind in größerem Stil kaum verwaltbar. ... Nils Kaczenski - MVP Windows Server ...
    (microsoft.public.de.german.win2000.gruppen_richtlinien)