Software Restriction Policies 1

[gmail2]

Hi All

I have one question regarding the above. When I create a nwe SRP, it autoamtically creates 2 path rules to allow evertying in program files and the windows directory. The SRP I'm implementing is on a terminal server so I want it to be quiet restrictive. I've already taken away the program files rule and added my own more customized one. But is it safe to remove the windows directory rule also ? Will windows still operate OK without this (obviously I'll create a new rule to allow explorer.exe) or will I end up having to create lots and lots of rules in order for everything to work ?

Irish Poetry - Karen O'Connor
Irish Poetry and Short Stories - Doghouse Books
Garten und Landschaftsbau

 

[TechyMcSe2k]

if you remove them, you will cause issues. Having to manually create a whole bunch of new allows for the Windows directory would be the start of it. Leave them there.

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[gmail2]

I suspected as much. Thanks for the reply

Irish Poetry - Karen O'Connor
Irish Poetry and Short Stories - Doghouse Books
Garten und Landschaftsbau