RE: preventing run-as option

["Scott Ramsdell" <Scott.Ramsdell () cellnet com>]

Vijay,

You can disable Run-As through GPO.  You can also restrict your users to
login to only their own machine through AD Users & Computers.

In addition, you should be able to change your proxy to grant access
based on source IP and assign DHCP reservations or static IPs to your
users.

Your users will have a much harder time sharing IPs than passwords.

Best Regards,
Scott Ramsdell


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of vijay shetti
Sent: Friday, October 06, 2006 2:16 AM
To: security-basics () securityfocus com
Subject: preventing run-as option

hello all!!!

In my company we have domain based environment...In our proxy access
permissions are given based on the name of the user and only few users
are given rights to view a set of sites like email sites...

For example employee A is given the permission and B does not have
that.What B does is that he runs Internet explorer using run-as option
and gives A's credentials...This way he is able to surf websites that
he is not given permission to.

Is there any option using which I can disable run-as option...


regards,
Vijay....

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------