Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Can we really block users from installing applications through Group policy? |
|---|---|
| Date: | Fri, 8 Oct 2004 19:55:18 +0200 |
can't you just block running any file not owned by Administrator and a few other trusted users? On Fri, 8 Oct 2004 11:56:09 -0300, Augusto Paes de Barros <apbarros@gmail.com> wrote:
Yes, through ACLs on registry keys like "Software". IF the users have only read only access on some of them installation packages won't work. However, remember that a lot of software don't need a "formal" installation process. You can play with the ACLs on the Program Files folder too, but I believe that it might break some apps. Regards, On Fri, 8 Oct 2004 05:45:31 -0700 (PDT), chang zhu <cyz2000@yahoo.com> wrote:Hi, all The users are not local administrators. We configure group policy to prevent user installs but it seems that it blocks only .msi packages. Users still can install applications through ex. setup.exe...Can we really block users from installing applications through Group policy? Any idea or thoughts on this? Plus, if we need to block users from saving .mp3 file on their computers, can we do it through group policy? we are on windows2000 and XP environment. Thanks always, Chang _______________________________ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com --------------------------------------------------------------------------- ----------------------------------------------------------------------------- Augusto Paes de Barros, CISSP http://www.paesdebarros.com.br --------------------------------------------------------------------------- ---------------------------------------------------------------------------
-- Tibor Veres tibor.veres@gmail.com --------------------------------------------------------------------------- ---------------------------------------------------------------------------
| Previous by Date: | RE: Can we really block users from installing applications through Group policy?, Starks, Brad |
|---|---|
| Next by Date: | Re: Can we really block users from installing applications through Group policy?, vic brown |
| Previous by Thread: | Re: Can we really block users from installing applications through Group policy?, Augusto Paes de Barros |
| Next by Thread: | RE: Can we really block users from installing applications through Group policy?, Jesse Weigert |
| Indexes: | [Date] [Thread] [Top] [All Lists] |