Security Basics mailing list archives
RE: Restricting users fron installing
From: "Teo Gomez" <tgomez () ubiquitelpcs com>
Date: Tue, 20 Jul 2004 15:51:56 -0400
I've used Restricted Groups to remove everyone permanently from the local Admins group. When users need to install software, I have our technicians reset the local admin password and show the user how to do a 'run-as.' Teo -----Original Message----- From: Roger A. Grimes [mailto:roger () banneretcs com] Sent: Monday, July 19, 2004 6:17 PM To: Juan B; security-basics () securityfocus com Subject: RE: Restricting users fron installing 1. You can use XP's Software Restriction Policies with Group Policies for part of it. 2. You can use NTFS permissions 3. You can use third party software 4. You can take away admin from your end-users Roger ************************************************************************ *** *Roger A. Grimes, Banneret Computer Security, Computer Security Consultant *CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4), A+ *email: roger () banneretcs com *cell: 757-615-3355 *Author of Malicious Mobile Code: Virus Protection for Windows by O'Reilly *http://www.oreilly.com/catalog/malmobcode *Author of upcoming Honeypots for Windows (Apress) ************************************************************************ **** -----Original Message----- From: Juan B [mailto:juanbabi () yahoo com] Sent: Saturday, July 17, 2004 6:00 AM To: security-basics () securityfocus com Subject: Restricting users fron installing Hi' In my company we have w2k domain. the pc's are all xp pro. I want to prevent users from installing or uninstalling any software or playing around with norton anti virus paramenters ( espcially to remove the auto protect option). Today the users are local admins on there pc's. what is the better way to do that maybe throw GPO ? please help. 10x __________________________________ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail ------------------------------------------------------------------------ --- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ------------------------------------------------------------------------ ---- ------------------------------------------------------------------------ --- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ----------------------------------------------------------------------------
Current thread:
- Restricting users fron installing Juan B (Jul 19)
- Re: Restricting users fron installing Rob Creely (Jul 20)
- RE: Restricting users fron installing phillip gay (Jul 20)
- <Possible follow-ups>
- RE: Restricting users fron installing Damon Brinkley (Jul 20)
- Re: Restricting users fron installing Greg Lansink (Jul 20)
- RE: Restricting users fron installing Roger A. Grimes (Jul 20)
- RE: Restricting users fron installing Teo Gomez (Jul 21)