Re: Using security groups in GPO filtering

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Howdie!

JoeT schrieb:
Thank you Florian. The hash rule gives sounds more secure, but how do I find the hash value, file length, etc. needed for this?

When right-clicking the "Software Restriction Policies" node in Group Policy Editor and choosing "New Hash Rule", you can choose the program you want to restrict. It automatically generates the hash.

Be sure to use the same program with the same version on the target systems. Other versions of the same program will result in not matching hashes.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.



Relevant Pages

  • RE: Windows 2003 Server - MS Rulez?
    ... Hash restrictions are only one of four new methods for restricting software. ... You can restrict by path (usually you would actually be *un*restricting by ... > protect WLANs from known vulnerabilities and threats. ... implement and enforce WLAN security policies to lockdown enterprise WLANs. ...
    (Focus-Microsoft)
  • Re: Group Policy to Deny Install.exe and Setup.exe
    ... The hash and path rules do not apply to W2K computers. ... You could use Group Policy to ... restrict those as described in KB link below, however a user may be able to bypass ...
    (microsoft.public.win2000.security)
  • Re: system monitoring
    ... If you want to restrict information flow, ... it will not hash out and even using a plaintext input to Microsoft ... The solution would be to have a database of hashes of files of interest. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: MSN Messenger Wont Restrict by GPO
    ... unique hash. ... Restricting Software Access and Protecting Computers ... you create a hash rule for a program, Software Restriction Policies ...
    (microsoft.public.windows.group_policy)
  • Re: MSN Messenger Wont Restrict by GPO
    ... unique hash. ... Restricting Software Access and Protecting Computers ... you create a hash rule for a program, Software Restriction Policies ...
    (microsoft.public.windows.group_policy)