Re: How to Remove Software Restriction?

From: Stew Basterash (stewartbash_at_hotmail.com)
Date: 04/06/04


Date: Tue, 6 Apr 2004 10:04:45 -0500

Hopefully you created the software restriction in it's own policy... that
way you can do what I learned to do... just delete the entire policy...

Software Restriction has some additional challanges... It's a great idea on
paper, but in practical use it is weak in documentation and
implementation... I tried to create a secured environment where by I wanted
all software restricted except for the applications that I wanted the user
to have... I still have not gotten this to work... and It's not for lack of
trying... If you restirct all... this works fine... however try to get a
HASH to work on an application... I could not get the stinking HASH to work
on anything other than simple EXE's... Adobe Acrobat reader... forget it...
Microsoft Office... Make sure you get all the exe's or forget it... I was
unsuccessfull and getting any HASH to work whatsoever...

Still looking for that answer???

"Todd Ryan" <anonymous@discussions.microsoft.com> wrote in message
news:C2787578-4A19-4D93-8121-B80A258B9272@microsoft.com...
> We're running 2000 Server and XP SP1 clients. I created a Software
Restriction in the user section of one of my group policy objects which is
only applied to a specific group of users. Now that I'm done testing on
this particular group, I would like to remove this software restriction
policy and create a new one in a GPO that is applied to the entire OU.
>
> The problem is that there is no "Remove" option. And if I simply set the
policy to "Unrestricted", this particular GPO has a higher priority over the
one that is applied to the entire OU. We cannot reorder the policies
because our design is that all specific group-related GPOs override the
default OU GPO. So if I set it to "Unrestricted" as some have suggested,
this particular group will not have the OU-based software restriction policy
applied unless I can completely remove the Software restriction policy from
this group-based GPO.
>
> Can someone tell me how to remove the Software Restriction policy from
this GPO?
>
> Thanks.
>
> --Todd.
>
>



Relevant Pages

  • RE: Windows Update not loading correctly
    ... I know that the Group Policy are the cause. ... >This is because when the client visit the Windows Update ... >| Terminal Servers are in this GPO, ... I did a gpo with a software restriction. ...
    (microsoft.public.windows.terminal_services)
  • Safer
    ... support the software restriction policies themselves. ... The default policy is to ... // Set safer level parameter passed ... // Delete previous safer entry for the program ...
    (microsoft.public.scripting.jscript)
  • Re: run only allowed windows applications
    ... You can still use software restriction policies to do this on Windows 2000. ... -Make sure drives are formatted NTFS ... -Set a default software restriction policy to disallow all applications. ... You should also look at the policy to prevent Registry Editing tools ...
    (microsoft.public.win2000.group_policy)
  • Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass
    ... This MS answer speaks volumes to their approach to security (I had ... "Software Restriction Policy and Group Policy are not meant to be ... "...Software restriction policies are a part of Microsoft's security ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass
    ... This MS answer speaks volumes to their approach to security (I had ... "Software Restriction Policy and Group Policy are not meant to be ... "...Software restriction policies are a part of Microsoft's security ...
    (Bugtraq)