Optional Tasks For Implementing Software Restriction Policies

By Author: fiona
Total Articles: 191
Comment this article

When implementing software restriction policies, you can CompTIA Security+ certification optionally complete the fol?lowing tasks:
Prevent software restriction policies from applying to local administrators
Set trusted publisher options
To prevent software restriction policies from applying to local administrators, complete the following steps:
1.Access the Group Policy Object Editor console for a GPO.
2.In the Group Policy Object Editor console, click Computer Configuration, doubleclick Windows Settings, double-click Security Settings, and then double-click Software Restriction Policies.
In the details pane, double-click the Enforcement setting.
What are the hardware requirements for deploying software by using Group Policy?
To deploy software by using Group Policy, an organization must be running Windows 2000 Server or later, with Active Directory and Group Policy on the server, and Windows 2000 Professional or later on the client computers.
2.Describe the tools provided for software deployment.
The Software Installation extension ...
... in the Group Policy Object Editor console on the server is used by administrators to manage software. Add Or Remove Programs in Control Panel is used by users to manage software on their own computers.
3.What is the difference between assigning applications and publishing applications?
When you assign an application to a user, the application is advertised to the a certification cost user the next time he or she logs on to a workstation, and local registry settings, including filename extensions, are updated. The application advertisement follows the user regardless of which physi?cal computer he or she logs on to. When you publish the application to users, the application does not appear installed on the users' computers. No shortcuts are visible on the desktop or Start menu, and no updates are made to the local registry on the users' computers. You assign required or mandatory software to users or to computers. You publish software that users might find useful to perform their jobs.
4. What is the purpose of Windows Installer packages?
A Windows Installer package is a file that contains explicit instructions on the installation and removal of specific applications.
Which of the following file extensions allows you to deploy software using the Software Installation extension? (Choose two.)
a..mst
b..msi
c..zap
d..zip
e..msp
f..aas
The correct answers are b and c. Files with the extension .msi are either native Windows Installer packages or repackaged Windows Installer packages, while files with the extension .zap are application files. Files with the extensions .mst and .msp are modifications and do not allow you to deploy software on their own. Files with the extension .aas are application assignment MCSE Certifications scripts, which contain instructions associated with the assignment or publication of a package.