Bill Sanderson wrote on 14-Jan-2005 10:18 PM:
> My short answer to this one would be no.
>
> It definitely fails in some simple cases such as the list of URL's for
> Browser Hijack Settings restore.
>
> So--I don't think the current design is there yet in this respect. However,
> your feedback, along with a good many others who have brought this up may
> help get this done right for the final released product.
>
Just to follow up on Bill's comments, Microsoft has to make the choice
whether to protect user profiles individually or all at all times.
If users can disable/tweak MSAS for their own accounts, then they would
be able to turn off certain protections, but not system-wide protections.
It might be a good idea, as some other software does, to disable the
ability of limited users from changing certain settings in MSAS, or make
it run as a service with no limited user interface.
--
Kent W. England, Microsoft MVP for Windows Security
|