RE: How to block users from installing other apps

It depends on how you define damage. Would they have access to other network resources that they should not.. No. Can they install apps which might contain viruses? Well hopefully your AV software will prevent that, but a definite maybe Could they install Kazaa, morpheous.. Insert the bandwidth draining app of your choosing here.. Definitely. Would this damage your network? Well if draining bandwidth to the point of making it essentially unusable constitutes damage I'd say so. Could your company find itself with problems if users are sharing copyrighted materials from their workstations? This one if obvious. Could they install software that could cause you licensing problems? Yes Could they install non company approved and productivity draining (ie games ) software ? Yes Users should NEVER be given admin rights, nor should they be allowed to install software on their workstations for these and any number of other reasons

-----Original Message-----
From: Jane Han [mailto:janehan22@yahoo.com] Sent: Thursday, July 03, 2003 11:47 AM
To: Dennis Bauer; focus-ms@securityfocus.com Subject: RE: How to block users from installing other apps

Thanks for all help.

I downloaded regmon and filemon and going to find which permission need to apply to the reg keys and files level.

Currently, I met some resistance from help desk manager, which many changes could be done at users' level if we need to change reg and file permission. he challenged me that the only damage can be caused only at local computer, not at domain.

If someone can list all damages that caused by assigning domain users to the local administrators group, I would greatly appreciate it.

Thanks in advance,

Jane

• Dennis Bauer <dbauer@Mines.EDU> wrote:
  > Have you tried regmon and filemon to see what you
  

  ---

  
  > -----
  >
  

  ---

  
  > ------
  >
  

  ---

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek