Can I Disable Error Messages Produced by Software Restriction Policies?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Brad Berson (userj_at_no.spam)
Date: 02/10/05 

Date: Thu, 10 Feb 2005 15:11:28 -0500

In a previous post I asked if there was a way to use Group Policies to
prevent users' login scripts from running. I'm concerned about the
damage potential in a Terminal Services environment, posed by login
scripts from business units that I cannot control but whose users must
have access to my servers.

There was no response at all here and none of my research turned up
anything terribly hopeful until I started reading about Software
Restriction Policies on Windows 2003.

I should be able to set a policy to disallow "\\*\*", which should
neatly remove the ability to run any program or script that isn't on
the Terminal Server's local drives, right?

But according to what I read, every time something violates the policy
the user is going to get an error message. That would make all the
user's logons rather ugly. Is there a way to disable the messages so
that violations would merely get logged quietly, if noticed at all?

Thanks for any help!

Brad
brad dott berson att bytebrothers dott org

Relevant Pages

  • I think I may have found a security oversight.
    ... native domain windows 2000 network. ... use group policies and scripts to control our connecting clients, ... circumvent our login scripts and group policies. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: AD policy queries
    ... have you looked at the GPMC scripts? ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... List the group policies and the OUs they affect. ...
    (microsoft.public.win2000.active_directory)
  • Re: odd user login issue issue
    ... and the proper login scripts and programs run at login. ... the login scripts run, However if "problem user" tries to login on "problem machine" the users scripts don't run at all. ...
    (alt.os.windows-xp)
  • Re: Login script and group policy resources
    ... Here's one way to handle your user logon scripts to map shared networked ... > I need to learn more about login scripts and group policy, ... > My primary goal for login scripts is mapping share drives to users at ...
    (microsoft.public.windows.server.sbs)
  • Re: Login script is NOT executed, even if set on group policies.
    ... to assign scripts in an Active Directory environment is with Group Policy. ... > the DC but NOT applied, because the login scripts are NOT executed. ... What's the foolproof way to accomplish this?? ...
    (microsoft.public.windows.server.general)