Re: User installations

Tech-Archive recommends: Fix windows errors by optimizing your registry

Security compatibility mode can be checked in Terminal Services
Configuration - Server settings.

I don't know any specifics about Firefox, but in general you can
say that any application which can be installed by just copying
files into the users home directory, without the need to modify the
HKLM part of the registry or install system files, can be
"installed" and used by users.
But then, such applications are rare, and can't do much harm to
your server (but be warned for 16 bits apps which monopolize the
CPU!).

If you want to have total control over what users can and cannot
run, you will have to use something like Soifware restriction
Policies:

324036 - HOW TO: Use Software Restriction Policies in Windows
Server 2003
http://support.microsoft.com/?kbid=324036

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

"HDI" <hdinf@xxxxxxxxxxx> wrote on 05 jan 2007:

It works, I can switch to the different terminals servers and on
all of them Firefox works perfect. It's like its installed on
their profile.

How can I check the security mode?

Vera Noest [MVP] schreef:

One possibility is that Terminal Services was installed in
"Relaxed Security" mode.

Have you checked if these applications actually work under
those user accounts? Maybe they *tried* to install those
applications, but failed to install dlls and system files,
leaving remnants of the apps in their home directory.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"jokes54321" <jokes54321@xxxxxxxxxx> wrote on 04 jan 2007 in
microsoft.public.windows.terminal_services:

Yeah, I had a user somehow install Netscape on a server via a
TS session. I'm also interested in knowing how they did it
without Admin rights.

Denny


"HDI" <hdinf@xxxxxxxxxxx> wrote in message
news:1167926356.676205.20020@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

How is it possible that users could install firefox on their
session.

If I see in Software I see nothing, but in their document
and settings is firefox.

Thx
.

Relevant Pages

  • <<<< SBS News of the week ended March 28th, 2004>>>>
    ... I've tested it on my home server. ... A whole bunch of KB articles courtesy of Marie McFadden SBS Community Lead ... Run setup - install on IIS is generally the only selection available. ... Most computer security experts agree that the ...
    (microsoft.public.backoffice.smallbiz)
  • <<<< SBS News of the week ended March 28th, 2004>>>>
    ... I've tested it on my home server. ... A whole bunch of KB articles courtesy of Marie McFadden SBS Community Lead ... Run setup - install on IIS is generally the only selection available. ... Most computer security experts agree that the ...
    (microsoft.public.backoffice.smallbiz2000)
  • <<<< SBS News of the week ended March 28th, 2004>>>>
    ... I've tested it on my home server. ... A whole bunch of KB articles courtesy of Marie McFadden SBS Community Lead ... Run setup - install on IIS is generally the only selection available. ... Most computer security experts agree that the ...
    (microsoft.public.windows.server.sbs)
  • Re: Assigning a Permission Set to an Assembly
    ... to use it you'll need to install the SDK. ... server with any form of .Net on it will have the compilers. ... Please do not send email directly to this alias, ... >> This has to be the most frustrating experience with any security ...
    (microsoft.public.dotnet.security)
  • Re: WinME w/NortonAV boots with http to foreign IP address
    ... > that server up content locally to isp customers. ... it - between the install and microsoft updates, ... familiar with security tools... ...
    (alt.computer.security)