Tuesday, January 22, 2008

Program Permissions for a Locked Down Environment

I have compiled a list of special permissions that will enable the following software to work correctly in a locked down environment. The following programs assume that the Everyone group gets Modify to these folders and files. Here goes:

Adobe CS3
\Documents and Settings\All Users\Application Data\FlexNet
\Program Files\Common Files\Adobe
\Program Files\Adobe

Araneae:
\Program Files\Araneae\template.dat

Microsim Eval 8:
\Program Files\MsimEv_8
\Windows\MSim_evl.ini

PS Pad:
\Program Files\PSPad\PSPad.ini
\Program Files\PSPad\Recent.ini

PSpice Orcad Lite 9.2:
\Program Files\Layout Plus
\Program Files\Pspice

Solidworks 2006 & 2007 & 2008
\Program Files\Solidworks\Data
\Documents and Settings\Administrator\Application Data\Solidworks
\Solidworks Data

SPSS 14 & 15:
\Windows\System32\servdat.slm

Labview 7.1 & 8.2
\Program Files\National Instruments

ADAM 4:
\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA
\Documents and Settings\Administrator\Local Settings\Temp

AutoCAD 200x
\Documents and Settings\Administrator\Application Data\Autodesk
\Documents and Settings\Administrator\Local Settings\Application Data\Autodesk
\Program Files\AutoCAD 200x
\Program Files\Autodesk

Clea
\Program Files\Clea

Base Permissions are as follows:

Modify to:
\Documents and Settings
\Windows\Temp

Read & Execute to :
\Documents and Settings\Administrator\Desktop
\Documents and Settings\Administrator\Start Menu
\Documents and Settings\All Users\Desktop
\Documents and Settings\All Users\Start Menu

After this is done, hide the Administrator and All Users folders (this folder only)

No comments: