Implementing Software Restriction Policies

By Author: fiona
Total Articles: 191
Comment this article

In the business computing environment, a wide variety of software applications are MCITP: Enterprise Administrator available to users from many sources. Documents and Web pages can contain executable code in scripts, and e-mail messages can contain executable code in attachments. Merely accessing such documents, Web pages, and e-mail messages forces users to make decisions about running applications. Worse, viruses and Trojan horses that might be present in the executable code can cause security breaches and damage to network files. In Windows XP and Windows Server 2003, software restriction policies have been developed to identify and control the running of software. This lesson shows you how to implement software restriction policies.
Utilizing GPO for software deployment, how can you configure things so as not to negatively impact the business by saturating the WAN links during deployment?
On a single LAN, it is common to set up a single SDP to store the applications to be deployed using Group Policy. Bandwidth cannot be totally disregarded, but it is much less of an issue ...
... locally, since high bandwidth is assumed. When WAN links are involved, the best way to prevent a deployment scenario where the client is installing the software over the WAN link is to provide an SDP at each office. Once that is accomplished, you could keep the GPOs separate for each office, with each GPO pointing to the local SDP A more elegant solution is to configure the three SDPs as replica links in a DFS topology. This way, all software deployment can reference the same SDP, and client machines will automatically be referred to the SDP in their own site.
Software Installation ccna boot camp extension An extension within Group Policy that is the administrator's primary tool for managing software within an organization. Software Installation works in conjunction with Group Policy and Active Directory, establishing a Group Policy-based software management system that allows you to centrally manage the initial deployment of software, mandatory and nonmandatory upgrades, patches, quick fixes, and the removal of software.
assign To deploy a program to members of a group where acceptance of the program is mandatory.
Windows Installer package A file that contains explicit instructions on the installation and removal of specific applications.
Which of the following actions should you take if a user double-clicks a document
associated with a published application and a different application than the
expected one installs?
a.Set the auto-install property for the package
b.Clear the auto-install property for the package
c.Adjust the precedence for the expected application in the Application Precedence list
d.Delete the unexpected application from the Application Precedence list
The correct answer is c. If a user double-clicks a document associated with a published application and a different application than the expected one installs, you should adjust a+ exam papers the precedence for the expected application in the Application Precedence list.