[THIN] Re: Only allow specified apps.

Exactly.

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Robert Barrett
Sent: 12 December 2003 9:38 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Only allow specified apps.


So I could let the staff run FreeCell but not the students by listing the
program in the appsec and the staff GPO and not in the student GPO.
 
Bob

  _____  

From: Jeff Durbin [mailto:techlists@xxxxxxxxxxxxx] 
Sent: Thursday, December 11, 2003 12:32 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Only allow specified apps.


You're right. You use AppSec to configure what applications will be allowed
to run for non-admins. So, for example, you have this list in AppSec:
 
c:\program files\Microsoft Office\Office10\winword.exe
c:\program files\Microsoft Office\Office10\excel.exe
 
  You then deliver the "Run only" list via policy. For example, you then
have two policies, one for students and one for staff. The staff get this
list in "Run only":
 
winword.exe
excel.exe
 
  The students get this list (via a different policy, of course):
 
winword.exe
 
  You then have the following situation:
 
1. An admin can run any application
2. The staff can run Word and Excel
3. The students can run only Word
4. Any other shortcuts or exectubles that students or staff try to run will
be refused. 
 
  Again, the user's list of allowed apps is the intersection of all
applications in AppSec's list and his personal "Run only" list delivered via
policy.
 
Jeff Durbin
  

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Robert Barrett
Sent: 12 December 2003 6:23 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Only allow specified apps.


Okay, to get back to Appsec for a minute.  Unless I am wrong I can only lock
down the apps for admins vs non-admins is that correct?  ie. if I lock the
students I also lock the staff.
 
Third party is not an option unless they have a hell of a deal for
education.

Bob

 

Other related posts: