RE: Restrictions using GPOs
- From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
- Date: Tue, 20 Dec 2005 10:01:42 GMT
Hi Rayhaan£¬
Thanks for using the SBS newsgroup!
For your description, I understand that you want to know how to restrict
users to install unauthorized programs. If I am off base, please don't
hesitate to let me know.
The Software Restriction Policies (SAFER) is a way that administrators can
define what applications are allowed or disallowed to run on a target
system. The configuration is deployed via Group Policy objects and stored
in the registry (either HKLM for computer policy and HKCU for user policy).
However, it only applies to Windows XP and later systems.
You can refer to the steps in the following article to deploy the software
restriction policies:
324036 HOW TO: Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/?id=324036
For more information on Software Restriction Policies, please refer to:
Software restriction policies (Step-by-step instructions on how to create
new software restriction policies.)
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise
/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/en
terprise/proddocs/en-us/Safer_topnode.asp
As a solution for this issue, you may configure two policies for Windows
2000 clients in the following location:
User Configuration\Administrative Templates\System
- Run only allowed Windows applications
- Don''t run specified Windows applications
Run only allowed Windows applications
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/gp/206.asp
Don''t run specified Windows applications
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/gp/207.asp
More information:
323525 HOW TO: Restrict Users from Running Specific Windows Programs in
Windows
http://support.microsoft.com/?id=323525
816100 How To Prevent Domain Group Policies from Applying to Administrator
http://support.microsoft.com/?id=816100
Hope above information helps! I am happy to be assistance of you and look
forward to your reply!
Have a nice day!
Sincerely,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Restrictions using GPOs
>thread-index: AcYEpgskEhTmi4lFR++oj1eRmasMPQ==
>X-WBNR-Posting-Host: 200.108.12.217
>From: "=?Utf-8?B?UmF5aGFhbg==?=" <Rayhaan@xxxxxxxxxxxxxxxxxxxxxxxxx>
>Subject: Restrictions using GPOs
>Date: Mon, 19 Dec 2005 06:11:02 -0800
>Lines: 21
>Message-ID: <0EE12B10-A309-4188-959A-512AB09858A9@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:231138
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi guys, I have a problem that I hope you can help me with.
>
>SBS 2003 premium.
>
>I would like to prevent my users from installing unauthorised programs. I
>know this can be done by using a GPO(s) but I need further clarification.
>Also note that restrictions should not apply to any of the Administrative
>accounts.
>
>My users are located in Departmental OU's (Accounts, Marketing...) inside
>SBSUsers under My Business and the computers accounts are in the
SBSComputers
>OU. The administrative accounts are in a Departmental OU named MIS. I
believe
>I have to create new GPOs that apply to the various Departmental OUs.
>
>Could someone please verify and if possible provide the instructions to do
so.
>
>
>Thanks
>Rayhaan.
>
>
>
.
- Follow-Ups:
- RE: Restrictions using GPOs
- From: Rayhaan
- RE: Restrictions using GPOs
- Prev by Date: Re: "Send as" and SBS Domain Power User
- Next by Date: Re: id- 1030 source - Userenv
- Previous by thread: Re: Master Boot drive creation
- Next by thread: RE: Restrictions using GPOs
- Index(es):
Relevant Pages
|
