Free software to stop unauthorised installation

Discussion in 'other security issues & news' started by M_S, Sep 21, 2005.

Thread Status:
Not open for further replies.
  1. M_S

    M_S Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    64
    Does anybody know of any freeware software that will make it impossible for an unauthorised user to install software on a shared machine?
     
  2. lupus

    lupus Registered Member

    Joined:
    Apr 4, 2005
    Posts:
    22
    Windows XP Limited Users Accounts capabilities...
     
  3. Close_Hauled

    Close_Hauled Registered Member

    Joined:
    Apr 24, 2004
    Posts:
    1,015
    Location:
    California
    Windows XP Home and Pro can limit a users ability to install software. There is nothing that you can do to stop 100% of the installs. A program just needs to be dowloaded to be usable and considered installed. Also, even restricted users can install some software, even though they should not be able too. My users manage to do it all the time, and they are all in the "Restricted user" group. Some installers manage to slip by the restriction.

    The best thing to do is:

    1) Use Windows XP Pro.

    2) Add everyone to the "Restricted user" group, even yourself.

    3) Reserve the admin password for yourself, and another person you trust.

    4) Do not log in as an admin, or admin equivalent on a daily basis. Use a restricted account for daily work.

    5) Be diligent about auditing the software inventory on your system.
     
  4. M_S

    M_S Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    64
  5. kareldjag

    kareldjag Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    622
    Location:
    PARIS AND ITS SUBURBS
    Hi,

    Windows policy restrictions is quite limited.

    Trust-no-Exe is an executable filter which can be used in multiple computers/workstations with a central management (Administrator):

    http://www.beyondlogic.org/solutions/trust-no-exe/trust-no-exe.htm

    It works as a service (with bltrust.sys kernel driver) and is integrated in the control panel.
    Very simple and easy to use (Access/Deny list).

    Regards
     
  6. M_S

    M_S Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    64
    That looks good - lightweight and straightforward. I'll try this before trying the MS PowerToy. Thanks.
     
Loading...
Thread Status:
Not open for further replies.