
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 102
Figure 50. Raising the domain functional level
Security Enhancements for Access Control
Authorization can be used to help control access to resources by people, computers, and
services. One very interesting example of this is software restriction policies. Network security is
another, as the following sections describe.
Software Restriction Policies
Software restriction policies enable you to control execution of an application on a system. With
this feature you can prevent applications from running on computers in your enterprise. To work
with software restriction policies, you must first install the Windows Server 2003 Administration
Tools Pack, which can be found on the Windows Server 2003 CD in the I386 folder. The
installation file you need to run is Adminpak.msi.
Note Before installing the Administration Tools Pack, close all MMC applications.
After installing the Administration Tools Pack, run Mmc.exe. You must select the Add/Remove
Snap-In option, and then select the Group Policy Object Editor. This step enables you to
expand the tree view to add policies as Figure 51 shows.
Kommentare zu diesen Handbüchern