restrict using registry

M

millin

Hi All,

I need to make our network more secure.
There are users fiddling with computers and I know we can block/restrict
people getting into a registry and eventviewer snap-ins using AD GPO.

Here we have to give Administrator permission for all the users to work with
some our applications.That's my biggest problem!!!

please give me some help.

thanks
mil
 
M

Meinolf Weber

Hello millin Spam),

Open computer configuration, windows settings, security settings, File system,
in the right pane rightclick and choose add file, brows to the file and configure
the permissions for it that you like to have. Do not disturb that it shows
your local machine, it will apply the settings also to the domain machines
where the policy is linked.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
 
J

Jon Wallace

Hi Millin,

To answer your question - have a look at Software Restriction Policies in
Group Policy to restrict the use of certain executables such as RegEdit or
MMC. There are also various tools around that can control executables in a
easier fashion too, AppSense Application Manager (www.appsense.com) is one
such example.

Also, have a look at a product called Privilige Guard from Avecto
(http://www.avecto.com/) - they have a product which allows you to only
assign admin rights to specific applications while having the users only as
standard users...

Best Regards,
Jon
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top