I am not a Microsoft fan, but what I believe is that Windows is unsecured because by default security is disabled and 99% of the people who use it don't know to secure the system. Windows was designed for the masses, for the people who don't even know the basics of computers. And I think that's why it's so popular. But I believe a windows machine can be made quite secured though not to the level of Unix. Unix was developed by the developers for the developers.
The articles that Gary mentioned will only provide rudimentary security. Restricting access to the regedit program is not going to stop someone to edit the registry. You can still edit it with many registry editing tools available (these tools will not respect that registry key you edited) or by writing a small program. In addition to restricting a user from running the regedit.exe/regedit32.exe, you can restrict the edit permission of the required keys. You can do this by running regedit32.exe, regedit.exe does not have the security option. But I would rather recommend a good third party tool for editing registry. Some of these tools record the changes you do so that you can undo the changes just in case you mess-up. I use the 'Registrar Lite' which is a freeware and I found it quite good. You can have it from http://www.resplendence.com/download. -Arvind Dave, David Awerbuch <david_awerbuch@ To: [EMAIL PROTECTED] YAHOO.COM> cc: (bcc: arvind.chaudhary/Polaris) Sent by: Subject: Re: Locking down MQ files/registry on Windows MQSeries List <[EMAIL PROTECTED] en.AC.AT> 03/11/04 02:08 AM Please respond to MQSeries List Gary, There is an article at http://www.winguides.com/registry/display.php/190/ that describes how to restrict access to the entire registry for a user. Another article at http://www.winguides.com/registry/display.php/113/ tells you how to restrict a user from running particular programs; the example includes regedit. Regards, Dave A. *** Note *** Possible duplicate transmission; I did not receive an ack from listserv to original xmit over 2 hours ago. > ----- original message ----- > Date: Wed, 10 Mar 2004 09:12:59 -0500 > Sender: MQSeries List <[EMAIL PROTECTED]> > From: Gary Ward <[EMAIL PROTECTED]> > Subject: Locking down MQ files/registry on Windows > To: [EMAIL PROTECTED] > > Folks, > > Any Windows gurus out there? > > I need to find a way to lock down the registry keys for MQ along with > restricting access to the queue and log file systems. > > I've got a bunch of "maverick" admins that like to make direct > changes to the registry when they need to change things in MQ. I > plan to remove access to MQ Services so they can no longer make > unauthorized changes there, but even with that available, they still > prefer to go right to the registry!!! Unfortunately they need to be > in the Administrators group in order to perform other necessary > functions. Anybody have a creative idea? > > The other issue is protecting the qmgr and log directories from > accidental deletion. This one is a toughie... > > Thanks in Advance! > Gary ===== David A. Awerbuch, IBM Certified MQSeries Specialist APC Consulting Services, Inc. Providing Automated Solutions to Business Challenges West Hempstead, NY (516) 481-6440 [EMAIL PROTECTED] __________________________________ Do you Yahoo!? Yahoo! Search - Find what you re looking for faster http://search.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
This e-Mail may contain proprietary and confidential information and is sent for the intended recipient(s) only. If by an addressing or transmission error this mail has been misdirected to you, you are requested to delete this mail immediately. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail message, contents or its attachment other than by its intended recipient/s is strictly prohibited. Visit Us at http://www.polaris.co.in
