Make them non admin (I mean now that Quickbooks can run as non admin..what's your excuse? ;-)

This blocking tool is for just that.

BTW the IE 7 will come through as a "update rollup" so that if you do not have this checked it won't autodownload.

AU isn't expected to start until November btw.


Lucas, Bryan wrote:

I see how to block IE7 from deploying through WSUS, but what I don’t see is a way to block a user from manually installing it.

(http://www.microsoft.com/downloads/details.aspx?FamilyID=4516A6F7-5D44-482B-9DBD-869B4A90159C&displaylang=en <http://www.microsoft.com/downloads/details.aspx?FamilyID=4516A6F7-5D44-482B-9DBD-869B4A90159C&displaylang=en>)

Our users are 90% XP SP2 and managed through GP. What about building a restricted software GPO that has a hash of iesetup7.exe (if that even exists)?

I want to restrict them from getting it through microsoftupdate.com as well.

Bryan Lucas

Server Administrator

Texas Christian University


--
Letting your vendors set your risk analysis these days? http://www.threatcode.com

If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will 
hunt you down...
http://blogs.technet.com/sbs

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

Reply via email to