[THIN] Re: Users installing programs

  • From: "Sheflin, Andrew" <ASheflin@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 9 Sep 2004 08:35:05 -0400

You can also lock down the permissions in the registry for HKLM/software.
 
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of 
Frank Monroe
Sent: Thursday September 09, 2004 8:01 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Users installing programs
 
Are these servers NT4 or Windows 2000/2003?.  If they are 2000 or above, go 
into terminal services configuration and change your permission compatibility 
mode to Full Security.  This will stop them from installing programs.  You may 
have to tweak some registry key's security for some existing programs so that 
they continue to work.  But fixing that is trivial if you use regmon. 
-----Original Message-----
From: Jim Abshire [mailto:Jim.Abshire@xxxxxxxxxxx] 
Sent: Wednesday, September 08, 2004 3:54 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Users installing programs
 I have a question, I work for a property management company and we provide 
Internet via Citrix to students. I have tried desperately to lock down the 
servers but they seem to still be able to install Internet based programs, 
(e.g. AOL instant messenger, Poker Party, etc) to name a few. Is there a way to 
lock the server down tight so this cannot continue without prohibiting the 
users to run necessary programs such as Office?
 
Jim Abshire 
Network Administrator 
Dinerstein Management 
713-570-0373 
 
---SECURITY DISCLAIMER--- This information including any attachments may 
contain legally privileged and/or highly confidential information. If you are 
not the intended recipient(s), or the employee responsible for delivery of this 
message to the intended recipient(s), you are hereby notified that any 
dissemination, distribution or copying of this communication and or attachments 
is strictly prohibited under State and Federal Laws. If you have received this 
communication in error, please immediately notify the sender and follow 
appropriate actions for disposal.

Other related posts: