Enable install on demand (other)...what would it do?

[EA]

If i disable install on demand (other), would this
prevent things like that nasty gator (spyware) from being
installed.

Reason why i ask is that I work for a school district and
gator is running rampant in the computer lab.

We restrict the students through group policies, but
unfortunatly we have to let me be power users for
certains apps.

We are trying to think of anything that would prevent
this and other spyware from being installed automatically.

Any ideas is this would help us.

We are also trying something on the firewall of
preventing certain file types from coming in. But this
would be much more difficult.

Thanks for any help!

-Evan

 

[SaltPeter]

If i disable install on demand (other), would this
prevent things like that nasty gator (spyware) from being
installed.

Reason why i ask is that I work for a school district and
gator is running rampant in the computer lab.

We restrict the students through group policies, but
unfortunatly we have to let me be power users for
certains apps.

We are trying to think of anything that would prevent
this and other spyware from being installed automatically.

Any ideas is this would help us.

We are also trying something on the firewall of
preventing certain file types from coming in. But this
would be much more difficult.

Thanks for any help!

-Evan

Disabling install on demand is a good first step. Consider using a tool like
Ad-Aware to help fight the infestations. Since you're a school i'ld consider
checking their licensing policy. If it helps any, the tool is quite well
designed albeit not cheap.

http://www.lavasoftusa.com/software/adaware/

 

[Guest]

Yea...I looked into adware. As a matter of fact when we
find a really bad PC we use it to clean up, then
uninstall the program.

Unfortunatly purchasing adware would run the district
somewhere around $10,000

Thanks

 

[SaltPeter]

Yea...I looked into adware. As a matter of fact when we
find a really bad PC we use it to clean up, then
uninstall the program.

Unfortunatly purchasing adware would run the district
somewhere around $10,000

Thanks

Was expecting such a response, you might be interested in modifying your
GPOs to restrict what can be run on your computers.
User Configuration\Administrative Templates\System
Run only allowed Windows applications

Also in IE Security settings... these prevent Gator from installing without
acknowledgement. You should be able to disable the "Prompt" and achieve a
guarenteed gator-free network.

Download signed ActiveX controls >> Prompt
Download unsigned ActiveX controls >> Disable
Initialize and script ActiveX controls not marked as safe >> Disable
Run ActiveX controls and plug-ins >> Prompt
Script ActiveX controls marked safe for scripting >> Prompt