Software Restriction Policy

[Philip Wang]

Hi, I came across a document on Software Restriction
Policy and it is mentioned that

"Software restriction policies utilize two different
rules - either 'unrestricted' or 'disallowed'. By using
the 'unrestricted' rule, you are allowing all programs to
execute (or install) except for the ones that you
specify. By using the "disallowed" rule, you are blocking
all programs from being executed (or installed), except
for ones that you have specifically allowed."

I have tried to apply it to a test Win XP PC to see if
normal user can install application and apparently it does
not work.. so is there a way we can allow normal user to
install applications or patch hot fixes on their own Win
XP PC without giving them Administrator rights? It seems
that software restriction is merely used for restricting
software or application from running...

Best Regards.
Philip

 

[Steven L Umbach]

You can only allow programs to execute that a user would normally be able to execute
if no SRP were in effect. --- Steve