Windows 2000; Only allow approved Shell extensions

[osis]

Windows 2000; Only allow approved Shell extensions
User Configuration\Administrative Templates\Windows Components\Windows
Explorer

Description
Directs Windows to start only the user interface extensions that the system
security or the user have approved.

When the system detects that the user is downloading an external program
that runs as part of the Windows user interface, the system searches for a
digital certificate or requests that the user approve the action. If you
enable this policy, Windows only starts approved programs.

This policy is designed to protect the system from damage from programs that
do not operate correctly or are intended to cause harm.

To view the approved user interface extensions for a system, start a
registry editor (Regedt32 or Regedit). The system stores entries
representing approved user interface extensions on a system in the following
registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell
Extensions\Approved.


How is this policy different than or similar to 'Run only allowed Windows
applications' or appsec? Might this best be used in conjunction with these
others? What does this policy really do?

Thanks

 

[Rebecca Chen [MSFT]]

Hi Osis,

I understand you want to know the difference between the policy " Only
allow approved Shell extensions" and "Run only allowed Windows
applications", and how to use these policies. However, this question is
related to the group policy, would you please post this question to
Microsoft.public.win2000.group_policy?

Thank you for your understanding!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------