ITsVISTA网链接： 2007年9月12日
-
微软现在发布细节关于怎样他们将满足判决允许他们的搜索性能与第三方工具一起使用。 它在SP1，并且其他避免性能问题的微软提供细节给帮助。
-
如果您使用小组政策处理景色，这里给您的反馈!
大众化： 6%
写由乔 2007年9月12日 与 没有评论.
读更多文章 法律 并且 政策 并且 小组 并且 GPO 并且 查寻 并且 新闻 并且 材料 并且 SP1 并且 beta.
政策
您当前浏览文章从 微软视窗景色兼容软件 匹配类别
出口由于景色的一项地方用户政策
我最近用信件接受了一个有趣的问题关于 我的文章关于MLGO在Windowsecurity.com. 问题是，如果对一名用户出口一项地方政策被分配到一名具体用户在另一台计算机…是可能的？
在抓我的头和研究它似乎象没人的位以后有一个适当回答为此，并且GUI工具不明显地是可利用的-，因此我必须产生某事我自己… 这是结果：
以下未用文件证明-和大概 无支持 -方法为我运作：
在“源计算机” ：
1. 创造或修改一项地方政策为“来源用户”
2. 去“C:\Windows\System32\GroupPolicyUsers\“并且找出最后更新政策文件夹
-应该命名文件夹与 SID (安全ID) “来源用户”，即。 “S-1-5-21-452792215-1268730067-2626448776-1108”
3. 复制文件夹和内容到“目标计算机”入同一个目录结构
在“目标计算机” ：
1. 给最近被复制的文件夹改名对“目标用户的” SID (应该接受“被出口的”政策)的用户
- 如何找到一名地方用户的SID ？
2. 设置NTFS允许在最近改名的文件夹对：
-系统= “充分…
点击持续读“出口由于景色的一项地方用户政策”在抓我的头和研究它似乎象没人的位以后有一个适当回答为此，并且GUI工具不明显地是可利用的-，因此我必须产生某事我自己… 这是结果：
以下未用文件证明-和大概 无支持 -方法为我运作：
在“源计算机” ：
1. 创造或修改一项地方政策为“来源用户”
2. 去“C:\Windows\System32\GroupPolicyUsers\“并且找出最后更新政策文件夹
-应该命名文件夹与 SID (安全ID) “来源用户”，即。 “S-1-5-21-452792215-1268730067-2626448776-1108”
3. 复制文件夹和内容到“目标计算机”入同一个目录结构
在“目标计算机” ：
1. 给最近被复制的文件夹改名对“目标用户的” SID (应该接受“被出口的”政策)的用户
- 如何找到一名地方用户的SID ？
2. 设置NTFS允许在最近改名的文件夹对：
-系统= “充分…
写由Jakob · H。 海得尔堡 2007年5月19日 与 no comments.
Read more articles on policy and sid and mlgpo and group policies and vista and Windows.
Blocking U3 USB devices
Hey,
I get this question a lot: how can we block U3 devices on the network?
Well, one approach that some companies take is to simply block the physical USB ports by glue etc. - no USB devices are able to get in, so we have a "secure" system... Hmmm, this would mean that we are not able to use other USB devices either - maybe not the best solution for all of us then...
If you have Windows Vista deployed the new Device Control functionality, but most companies have Windows XP and Windows Server 2003 products in production (and probably waits for Vista Service Pack 1 before they go ahead with the Vista deployment)... So, what could they do then?
Third party software, like GFI EndPointSecurity is capable of blocking USB devices etc. - and it's does a very good job too, but there's also a free way to do it (if you ask me it's the best way to do it): implement Software Restriction Policies (SRP)!
I've been writing about the "Default Deny All Applications" approach and this is (of couse) also capable of blocking U3 devices - out...
Click to continue reading "Blocking U3 USB devices"I get this question a lot: how can we block U3 devices on the network?
Well, one approach that some companies take is to simply block the physical USB ports by glue etc. - no USB devices are able to get in, so we have a "secure" system... Hmmm, this would mean that we are not able to use other USB devices either - maybe not the best solution for all of us then...
If you have Windows Vista deployed the new Device Control functionality, but most companies have Windows XP and Windows Server 2003 products in production (and probably waits for Vista Service Pack 1 before they go ahead with the Vista deployment)... So, what could they do then?
Third party software, like GFI EndPointSecurity is capable of blocking USB devices etc. - and it's does a very good job too, but there's also a free way to do it (if you ask me it's the best way to do it): implement Software Restriction Policies (SRP)!
I've been writing about the "Default Deny All Applications" approach and this is (of couse) also capable of blocking U3 devices - out...
Written by Jakob H. Heidelberg on May 10th, 2007 with no comments.
Read more articles on endpointsecurity and srp and u2 and software restriction policies and gfi and block and policy and vista and xp and hacker and Windows Server 2003 and GPO and Windows.
