Re: Software Restriction Policies

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Uncle Stewie (whoever_at_whatever.com)
Date: 03/01/04 

Date: Mon, 1 Mar 2004 12:27:43 -0600

Matt,

2003's new feature for Software Restriction is supposed to solve these
issues... However I am not able to use it in the way I would like, nor has
there been any help forthcoming in the newsgroups to date...

In 2000 However... the only what that I know of is still using the Restrict
Run List... Which was available in NT 4 as well... You can set the setting
in Policy, the drawback being it is restricted through the Windows Shell
ONLY... which means if they execute through a command prompt... well they
have full unfettered access... You have to do some trickery to avoid them
running cmd.exe... Take away command prompt so they cannot access command
line inferences...

Stew Basterash

"Matt Ball" <matt_ball@landon.net> wrote in message
news:ur$T%2346$DHA.3352@TK2MSFTNGP09.phx.gbl...
> I am running Windows 2000 Advanced Server (SP4) and Windows 2000 Pro (SP4)
> clients. I would like to restrict certain programs (i.e. telnet) for one
of
> my Global Groups.
>
> I undertand that in Windows 2003 Server there is a Global Policy setting
> (http://support.microsoft.com/default.aspx?kbid=324036) where you can
enter
> the path of any application you want blocked from use. But that setting
is
> not in Advanced Server 2000. Does anyone know of a workaround for this?
> Can I block an executable for a group somehow?
>
>

Relevant Pages

  • Re: scp. I dont get it
    ... allows you restrict the use of the key to a specific ip, ... only use scp, and even then, only if the destination includes ... or running a cron script to do it for you. ... # original scp command given by the client. ...
    (comp.os.linux.security)
  • Re: XP login
    ... How do I restrict a User's Logon hours on my Windows XP machine? ... In order to do that you'll need to use the NET USER command. ...
    (uk.rec.sheds)
  • Re: "ntpdate" versus "ntpd"
    ... > behaviour, strictly from the command line, without resorting to messing ... could specify a server and some parameters on the command line, ... (Fill in iburst on the server ... restrict default ignore ...
    (Fedora)
  • Windows XP (Home)--Limiting User Account?
    ... To restrict a users logon hours use the net user command. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: help: amount of free disk space?
    ... >> If you can restrict yourself to Windows only then the parsing the ... >> output of the DIR command works well. ...
    (comp.lang.java.programmer)