Suggestion...

  • Thread starter Thread starter Derrick
  • Start date Start date
D

Derrick

My suggestions, under advanced there should be a way to
disallow certain (though trusted) applications. For
example, the RealPlayer scheduler/updater is
automatically added to startup (registry) every time you
launch RealPlayer, your real-time agents allow it to add
itself, I'm not given the option to allow or deny.
Personally I would deny it as I hate a million startup
items in my registry. I want full control over what to
allow and disallow, it appears however that MS has deemed
the realplayer updater safe and allows it without
prompting me.
 
You can also create a software restriction policy in Windows Group Policy to
prevent that file from executing.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
You can also create a software restriction policy in Windows Group Policy to
prevent that file from executing.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
Click to expand...

Steve,

For the benefit of those who have not used Group Policy Editor, can you post
instructions how to do this?
 
My suggestions, under advanced there should be a way to
disallow certain (though trusted) applications. For
example, the RealPlayer scheduler/updater is
automatically added to startup (registry) every time you
launch RealPlayer, your real-time agents allow it to add
itself, I'm not given the option to allow or deny.
Personally I would deny it as I hate a million startup
items in my registry. I want full control over what to
allow and disallow, it appears however that MS has deemed
the realplayer updater safe and allows it without
prompting me.
Click to expand...

Derrick,

I heartily second your suggestion. I resent the RealSched / TKBell insistence,
on loading it every time you run RP, also.
 
Chuck said:
Steve,

For the benefit of those who have not used Group Policy Editor, can you
post
instructions how to do this?
Click to expand...

Click Start, and then click Run.
Type gpedit.msc and then click OK

Computer Configuration/Windows Settings/Security Settings/
Software Restriction Policies/Additional Rules/new path rule
and browse to the file you intend to disallow to run.
 
Click Start, and then click Run.
Type gpedit.msc and then click OK

Computer Configuration/Windows Settings/Security Settings/
Software Restriction Policies/Additional Rules/new path rule
and browse to the file you intend to disallow to run.
Click to expand...

Thanks, Michael. Bye Bye Real Scheduler.
 
Is there something wrong with using selective startup inMSConfig to block
these unwanted programs?
 
Is there something wrong with using selective startup inMSConfig to block
these unwanted programs?
Click to expand...

You can remove RealSched aka TKBell from startup, using MSConfig, all you want.
Each time you run RealPlayer, it starts RealSched, which readds TKBell to
HKLM\Run. If you disabled TKBell, or deleted it, it just adds itself again.
 
Back
Top