 |
 |
Keep in mind that this will disallow them from using some USB flash drives. And in response to the previous post about it being miss-labeled as a root-kit: I would have thought that initially as well, however I did some research when I first discovered the SysInternals 'root kit revealer' program and found that a root-kit on a windows machines goes by a completely different definition than a root kit on a unix/linux machine. In windows it appears to be all about hiding things from the kernel and the os, in *nix its all about privilege escalation, back doors and hiding your tracks. Here is an excellent book on the topic... http://www.amazon.com/gp/product/0321294319/104-7516086-3390329?v=glance&n=2 83155&n=507846&s=books&v=glance /------------------------------------ | Bryan Murphy | Information Technology Coordinator | Plant Research Lab and Plant Biology | http://infotech.prl.msu.edu \------------------------------------ -----------[ 11/10/05 6:16 PM [log in to unmask] ]-------------- > Tom. > > Here are some different options, see which one would fit best for you. > I'm positive these settings are stored in the registry, not sure > where, but you should be able to find them and create a VBScript that > will set them for you automatically. > > Start --> Control Panel --> Administrative Tools --> Local Security > Settings --> Security Settings --> Local Policies --> User Rights > Assignment --> Load and unload device drivers > > Also check out > Start --> Control Panel --> Administrative Tools --> Local Security > Settings --> Security Settings --> Local Policies --> Devices: > Unsigned driver installation behavior > > I believe this is the same option as under Start --> Control Panel --> > System --> Hardware --> Driver Signing > > > -t > > On 11/10/05, Tom Rockwell <[log in to unmask]> wrote: >> Troy, >> >> Is there a local registry setting for stand-alone Windows machines that >> achieves the same thing? >> >> Thanks, >> Tom >> >> Troy Murray wrote: >>>> As for work Windows computers, is there a way to lock out users from >>>> installing (either willfully or inadvertently) new or modified drivers? >>> >>> >>> If your running a Windows 2000 or 2003 domain, there is a policy >>> setting for the domain policy that you can set which will restrict the >>> users from installing any drivers, un-signed drivers or signed >>> drivers. >>> >>> -t >>> >>> >>> On 11/10/05, Tom Rockwell <[log in to unmask]> wrote: >>> >>>> Sony's software is only installed on Windows computers. The security >>>> model of Linux and Mac OS X should prevent this type of software from >>>> automatically being installed. It seems safe to qualify "your computer" >>>> to "your Windows computer". >>>> >>>> As for work Windows computers, is there a way to lock out users from >>>> installing (either willfully or inadvertently) new or modified drivers? >>>> Is there no way for an administrator to prevent this such >>>> auto-installs (something more robust than disabling autorun for CDs)? >>>> >>>> -Tom >>>> >>>> Richard Wiggins wrote: >>>> >>>>> This is a brand new development and it is widely covered in the media. >>>>> Go to news.google.com <http://news.google.com> and search for "sony" and >>>>> you will find lots of coverage. So far, I do not know of a list that is >>>>> comprehensive. I would suspect that any recent Sony music CD might be >>>>> so infected. (Sony owns multiple music labels.) >>>>> >>>>> If I were crafting a message about this for end users, it would be along >>>>> the lines of "Sadly, recent news involving Sony's music division >>>>> demonstrates that a commercial audio CD can install unwanted and >>>>> dangerous software on your computer without warning even if you merely >>>>> insert the CD into the drive to play it." >>>>> >>>>> I would hate to have to advise end users to never play audio CDs on work >>>>> computers, but that's probably the safest advice right now. >>>>> >>>>> /rich >>>>> >>>>> >>>>> On 11/10/05, *Thomas P. Carter* <[log in to unmask] >>>>> <mailto:[log in to unmask]>> wrote: >>>>> >>>>> Does anyone know if there's a list of affected (Infected? >>>>> Infecting?) Sony titles anywhere? >>>>> >>>>> >>>>> >>>>> *Thomas P. Carter,** **Ph.D.* >>>>> Department of Chemistry >>>>> Michigan State University >>>>> East Lansing, MI 48824-1322 >>>>> >>>>> >>>>> >>>>> >>>> >>>> >>>> >>>> >>> >>> >>> -- >>> Troy D Murray >>> Blog: http://troymurray.blogspot.com/ >> >> >> >> > > > -- > Troy D Murray > Blog: http://troymurray.blogspot.com/