Re: Restrict Users from Installing programs

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/28/04 

Date: Sun, 28 Mar 2004 00:14:10 GMT

Except unless there has been some update I am not aware of [extremely possible] SRP
are not available on W2K. --- Steve

"Herb Martin" <news@LearnQuick.com> wrote in message
news:%232%23oq4BFEHA.1012@TK2MSFTNGP11.phx.gbl...
> Software restriction policies could be made to work for these.
>
> If you only allows "approved directories" where you do NOT
> allow the user to write, and approved APPs in the directories
> where users might require write permissions, then you could
> probably stop all "unapproved apps."
>
>
>
> --
> Herb Martin
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
> news:OoM1tgBFEHA.240@tk2msftngp13.phx.gbl...
> > Hotbar!
> > (I think).
> >
> > Herb Martin wrote:
> > > Some apps don't need any specific permissions or rights,
> > > nor to be formally installed to be effectively installed and
> > > run.
> > >
> > >> The easiest way to accomplish this is to remove administrative
> > >> privileges
> > > from these users. Remove them from the
> > >> Administrators group and Power Users group and they will not have the
> > > rights to install apps. This may break some
> > >> applications though so you'll need to test thoroughly.
> > >>
> > >> Thank you,
> > >> Mike Johnston
> > >> Microsoft Network Support
> > >> --
> > >>
> > >> This posting is provided "AS IS" with no warranties, and confers no
> > > rights. Use of included script samples are subject to the
> > >> terms specified at
> > >> http://www.microsoft.com/info/cpyright.htm
> > >>
> > >> Note: For the benefit of the community-at-large, all responses to
> > >> this
> > > message are best directed to the newsgroup/thread from
> > >> which they originated.
> >
> >
>
>

Relevant Pages

  • Re: File Level Blocking
    ... permissions on all files except for permitted file extensions, ... apply a security template / database you created using MMC.EXE and the ... and deploy Software Restriction Policies. ... administrator can bypass SRP by booting the computer into Safe Mode. ...
    (microsoft.public.windows.server.security)
  • Re: Why are programs not digitally signed to protect against viruses?
    ... Correct me if I am wrong Steve, but one can also, for example, use ... Microsoft MVP (Windows Server: Security) ... If you are interested in SRP see the link ... >> google, and symantec searches on it, to try and verify its authenticity. ...
    (microsoft.public.security)
  • Re: network restrictions
    ... administrators as local administrators have the ability to override ... Software Restriction Policies are ... SRP and other Group Policy is easily applied to domain computers. ... "Christopher S. Coviello" wrote in message ...
    (microsoft.public.windowsxp.security_admin)
  • Re: local policy
    ... You can modify ntfs permissions and use Software Restriction Policies to ... restrict what a user can run on an XP Pro computer. ... Shortcuts are also considered applications with SRP. ... there are many settings including hiding My Network Places, ...
    (microsoft.public.windows.group_policy)
  • Re: Software Restriction Policies and logging
    ... are purely related to SRP. ... I'm the Program Manager for Software Restriction Policies. ... entry in the log file - if there isn't an entry, ... The question I have is in regards to the logging when a deny is applied. ...
    (microsoft.public.windows.terminal_services)