PowerBroker application - FOLLOW-UP Question

2011-06-03 Thread Joseph Heaton
I was just on the phone with a reseller for the Scriptlogic product, and he 
mentioned Group Policy Preferences for what I'm trying to do.  Does anyone know 
if permission elevation for installing specific software is possible through 
GPP?  How is everyone out there handling users installing specific software 
without making them local admins?

This will be a 2008R2/Win7 environment, so would request that answers be based 
on that, if possible.  What we do with older technology isn't necessarily what 
we can/will do with newer.  Also, I know about, and am looking into the 
BeyondTrust, Scriptlogic and Viewfinity products, so no need to respond with 
those options, unless you have a big selling point on any of them.

As always, I appreciate all help/advice/tips.

 Joseph Heaton jhea...@dfg.ca.gov 5/26/2011 4:24 PM 
Has anyone used this product, from BeyondTrust?  Looks like it would be useful 
to minimize permission levels on Win 7 boxes.  We're looking at using 
Applocker, and this seems to be a good fit to go along with that, to 
automatically raise perm levels for apps in Applocker, so normal users can 
install whitelisted applications.

Any personal experiences would be most appreciated.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: PowerBroker application - FOLLOW-UP Question

2011-06-03 Thread Rankin, James R
Group Policy Preferences can run as a specific user. Not sure whether software 
installation gpos come under that though.

Typed frustratingly slowly on my BlackBerry® wireless device

-Original Message-
From: Joseph Heaton jhea...@dfg.ca.gov
Date: Fri, 3 Jun 2011 10:50:20 
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
Reply-To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.comSubject: PowerBroker application - 
FOLLOW-UP Question

I was just on the phone with a reseller for the Scriptlogic product, and he 
mentioned Group Policy Preferences for what I'm trying to do.  Does anyone know 
if permission elevation for installing specific software is possible through 
GPP?  How is everyone out there handling users installing specific software 
without making them local admins?

This will be a 2008R2/Win7 environment, so would request that answers be based 
on that, if possible.  What we do with older technology isn't necessarily what 
we can/will do with newer.  Also, I know about, and am looking into the 
BeyondTrust, Scriptlogic and Viewfinity products, so no need to respond with 
those options, unless you have a big selling point on any of them.

As always, I appreciate all help/advice/tips.

 Joseph Heaton jhea...@dfg.ca.gov 5/26/2011 4:24 PM 
Has anyone used this product, from BeyondTrust?  Looks like it would be useful 
to minimize permission levels on Win 7 boxes.  We're looking at using 
Applocker, and this seems to be a good fit to go along with that, to 
automatically raise perm levels for apps in Applocker, so normal users can 
install whitelisted applications.

Any personal experiences would be most appreciated.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin