steven l umbach

I believe the problem is that Zone Alarm runs as a service and SRP will
therefore not work correctly. See if there is a service [or services] for ZA
on one of those computers and then you could use Group/security policy to
disable the service via computer configuration/Windows settings/security
settings/system services. You may need to create a custom security.inf
template via mmc security templates snapin, with the easiest way to be from
a computer with ZA installed on it. It seems as if your users may be local
administrators if they can install software like ZA. If at all possible try
to prevent users from being local administrators which often can be
accomplished by modifying some folder/registry permissions if they currently
need to be a local administrator to run some applications. --- Steve

apollo

Has anyone got Software restriction to work via GPO?
So far I have only configure a local policy via gpedit.msc and set the
default to allow software but prevent/disallow winmine.exe (minesweeper). I
have set the rule via hash and path method but neither works after gpupdate
/force or machine reboot. Advice please...

v-xuwen@online.microsoft.com (vincent xu

Hi,

Check following article:

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch
06.mspx

Hope it helps.


Best regards,

Vincent Xu
Microsoft Online Partner Support

================================================== ====
Get Secure! - http://www.microsoft.com/security
================================================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
================================================== ====
This posting is provided "AS IS" with no warranties,and confers no rights.
================================================== ====

--------------------


I

gpupdate

florian frommherz

Howdie Apollo!


In addition to what Vincent posted: As you posted your issue in the
Windows 2000 Group Policy group, I'd like to mention that Software
Restriction Policies only work for Windows XP and Windows Server 2003
clients. Windows 2000 clients will just ignore the settings you make,
since Windows 2000 does not "contain" the needed Client Side Extension
for processing...

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
blog: http://www.frickelsoft.net/blog.