+ Post New Thread
Page 4 of 4 FirstFirst 1234
Results 46 to 48 of 48
How do you do....it? Thread, Restrict Kids from Installing ANYTHING in Technical; Add exemptions for managed software installs \(servername)\install Managed software is installed as the "SYSTEM" user so you shouldn't need to ...
  1. #46

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,543
    Thank Post
    831
    Thanked 610 Times in 413 Posts
    Rep Power
    432

    Re: Restrict Kids from Installing ANYTHING

    Add exemptions for managed software installs \\(servername)\install
    Managed software is installed as the "SYSTEM" user so you shouldn't need to specify this as its installed during login before the users desktop is displayed.

    Then again, my Managed software is assigned to the computer and not to the user... so this may have a bearing on it.

    Now if only I can find a way to stop the darlings from rebooting the PC cos they cannot be arsed waiting for the software to install - like they did with the install of Service Pack 2!!

    And then had the nerve to come to me and say their PC wasn't working!

  2. #47
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    33

    Re: Restrict Kids from Installing ANYTHING

    Quote Originally Posted by NetworkGeezer
    Good work AJ.

    I assume for login script exemptions there is an entry for each DC hosting Active Directory.
    As ChrisH has pointed out, the \\(fqdn)\sysvol (eg. \\your.domain.name\sysvol) entry should cover logon scripts, unless you are using the old fashioned ones under NETLOGON. If so, then you might need to add extra exemptions on a per DC basis, I'm not sure. If you are using NETLOGON and don't want to add individual exemptions per DC, you could try \\your.domain.name\netlogon, which works if you browse to it.

  3. #48
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    33

    Re: Restrict Kids from Installing ANYTHING

    Managed software is installed as the "SYSTEM" user so you shouldn't need to specify this as its installed during login before the users desktop is displayed.
    True, but some managed software (yes, I do machine assigned installs as well) seems to needs to access to the source MSI when run for the first time on a new profile (e.g. Office first run which sets up some user registry stuff I think). I think this is 'self repair'!

    In theory, all MSI's are cached in %SystemRoot%\Installer, but as I said, when I tested, at least one piece of software want to go back to the source, and presumably in the security context of the logged on user because SRP blocked it.

SHARE:
+ Post New Thread
Page 4 of 4 FirstFirst 1234

Similar Threads

  1. Kids Installing Firefox
    By tomscaper in forum Windows
    Replies: 30
    Last Post: 17th October 2007, 11:29 AM
  2. Restrict Logon
    By DSapseid in forum Wireless Networks
    Replies: 7
    Last Post: 28th March 2007, 10:30 AM
  3. Restrict filetypes
    By Gatt in forum How do you do....it?
    Replies: 21
    Last Post: 22nd September 2006, 11:28 AM
  4. restrict pupils printing
    By chrbb in forum How do you do....it?
    Replies: 3
    Last Post: 6th July 2006, 07:51 AM
  5. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •