Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Guides - Privacy & Security Tips
Windows Home/Pro owner? Use Software Restriction Policies!
Message
<blockquote data-quote="Windows_Security" data-source="post: 528492" data-attributes="member: 50782"><p>LS,</p><p></p><p>For people owning a Pro/Business/Ultimate/Enterprise version of their Windows OS and not using the group policy editor to increase security with build in features, here is a simple 10 step tutorial to enable SRP (works for all Windows OS-ses with UAC, so Vista and higher).</p><p></p><p>SRP stands for Software Restriction Policies. As the name says it can be used to restrict software on your PC. It has basically three modes. This introduction describes how to use Basic User, because Basic User requires little tweaking and still allows to update/install software using Run as Administrator <strong><span style="color: #ff0000">(make sure to create a restore point or have image as backup)</span></strong></p><p></p><p><strong>Run as administrator</strong></p><p>With these "Basic User default" SRP rules, when you try to run a program in user folders, it will be blocked. You can still update/install software by using the "Run as Administrator" right click context menu in Windows Explorer. Microsoft Installer Packages don't run with elevated (admin) rights by default. Luckily Symantec has provided a registry tweak for that: download <a href="http://www.symantec.com/connect/downloads/msi-run-administrator-context-menu-vista" target="_blank">MSI "Run as administrator" Context Menu for Vista | Symantec Connect</a> (MsiRunAsAdmin.zip)</p><p></p><p>Extract the zip file and double click it.</p><p></p><p><strong>Enabling SRP using Basic User as default level</strong></p><p>Click on Windows Start button and choose "Run". Enter secpol.msc and enter. Secpol.msc launches the <em>Local Security Policy</em> management console and follow the instructions on the picture below. Restart your computer when ready and your done.</p><p></p><p>[ATTACH=full]110421[/ATTACH]</p></blockquote><p></p>
[QUOTE="Windows_Security, post: 528492, member: 50782"] LS, For people owning a Pro/Business/Ultimate/Enterprise version of their Windows OS and not using the group policy editor to increase security with build in features, here is a simple 10 step tutorial to enable SRP (works for all Windows OS-ses with UAC, so Vista and higher). SRP stands for Software Restriction Policies. As the name says it can be used to restrict software on your PC. It has basically three modes. This introduction describes how to use Basic User, because Basic User requires little tweaking and still allows to update/install software using Run as Administrator [B][COLOR=#ff0000](make sure to create a restore point or have image as backup)[/COLOR][/B] [B]Run as administrator[/B] With these "Basic User default" SRP rules, when you try to run a program in user folders, it will be blocked. You can still update/install software by using the "Run as Administrator" right click context menu in Windows Explorer. Microsoft Installer Packages don't run with elevated (admin) rights by default. Luckily Symantec has provided a registry tweak for that: download [URL='http://www.symantec.com/connect/downloads/msi-run-administrator-context-menu-vista']MSI "Run as administrator" Context Menu for Vista | Symantec Connect[/URL] (MsiRunAsAdmin.zip) Extract the zip file and double click it. [B]Enabling SRP using Basic User as default level[/B] Click on Windows Start button and choose "Run". Enter secpol.msc and enter. Secpol.msc launches the [I]Local Security Policy[/I] management console and follow the instructions on the picture below. Restart your computer when ready and your done. [ATTACH=full]110421[/ATTACH] [/QUOTE]
Insert quotes…
Verification
Post reply
Top