RE: Restrictions using GPOs
- From: "Rayhaan" <Rayhaan@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 20 Dec 2005 20:30:03 -0800
Hi Jenny
Thanks for the information. I will try them in a test lab before
implementing in production enviorment.
Regards
Rayhaan.
""Jenny wu [MSFT]"" wrote:
> Hi Rayhaan£¬
>
> Thanks for using the SBS newsgroup!
>
> For your description, I understand that you want to know how to restrict
> users to install unauthorized programs. If I am off base, please don't
> hesitate to let me know.
>
> The Software Restriction Policies (SAFER) is a way that administrators can
> define what applications are allowed or disallowed to run on a target
> system. The configuration is deployed via Group Policy objects and stored
> in the registry (either HKLM for computer policy and HKCU for user policy).
> However, it only applies to Windows XP and later systems.
>
> You can refer to the steps in the following article to deploy the software
> restriction policies:
>
> 324036 HOW TO: Use Software Restriction Policies in Windows Server 2003
> http://support.microsoft.com/?id=324036
>
> For more information on Software Restriction Policies, please refer to:
>
> Software restriction policies (Step-by-step instructions on how to create
> new software restriction policies.)
>
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise
> /proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/en
> terprise/proddocs/en-us/Safer_topnode.asp
>
> As a solution for this issue, you may configure two policies for Windows
> 2000 clients in the following location:
>
> User Configuration\Administrative Templates\System
>
> - Run only allowed Windows applications
> - Don''t run specified Windows applications
>
> Run only allowed Windows applications
> http://www.microsoft.com/windows2000/techinfo/reskit/en-us/gp/206.asp
>
> Don''t run specified Windows applications
> http://www.microsoft.com/windows2000/techinfo/reskit/en-us/gp/207.asp
>
> More information:
>
> 323525 HOW TO: Restrict Users from Running Specific Windows Programs in
> Windows
> http://support.microsoft.com/?id=323525
>
> 816100 How To Prevent Domain Group Policies from Applying to Administrator
> http://support.microsoft.com/?id=816100
>
> Hope above information helps! I am happy to be assistance of you and look
> forward to your reply!
>
> Have a nice day!
>
> Sincerely,
>
> Jenny Wu
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >Thread-Topic: Restrictions using GPOs
> >thread-index: AcYEpgskEhTmi4lFR++oj1eRmasMPQ==
> >X-WBNR-Posting-Host: 200.108.12.217
> >From: "=?Utf-8?B?UmF5aGFhbg==?=" <Rayhaan@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >Subject: Restrictions using GPOs
> >Date: Mon, 19 Dec 2005 06:11:02 -0800
> >Lines: 21
> >Message-ID: <0EE12B10-A309-4188-959A-512AB09858A9@xxxxxxxxxxxxx>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windows.server.sbs
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:231138
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Hi guys, I have a problem that I hope you can help me with.
> >
> >SBS 2003 premium.
> >
> >I would like to prevent my users from installing unauthorised programs. I
> >know this can be done by using a GPO(s) but I need further clarification.
> >Also note that restrictions should not apply to any of the Administrative
> >accounts.
> >
> >My users are located in Departmental OU's (Accounts, Marketing...) inside
> >SBSUsers under My Business and the computers accounts are in the
> SBSComputers
> >OU. The administrative accounts are in a Departmental OU named MIS. I
> believe
> >I have to create new GPOs that apply to the various Departmental OUs.
> >
> >Could someone please verify and if possible provide the instructions to do
> so.
> >
> >
> >Thanks
> >Rayhaan.
> >
> >
> >
>
>
.
- References:
- RE: Restrictions using GPOs
- From: "Jenny wu [MSFT]"
- RE: Restrictions using GPOs
- Prev by Date: FYI: Solution to an unusual RWW problem
- Next by Date: Re: Configuring IPs
- Previous by thread: RE: Restrictions using GPOs
- Next by thread: Re: Restrictions using GPOs
- Index(es):
Relevant Pages
|
