Least Privilege Security for Windows 7, Vista, and XP

This practical handbook for System Administrators or desktop support staff wanting to implement Least Privilege Security on Windows systems gives detailed step-by-step instructions, solutions to common technical challenges, and Microsoft best practice advice. Topics covered include: applying LPS to categories of users; getting management buy-in; using Microsoft's Application Compatibility Toolkit (ACT) to identify potential compatibility problems; preparing and deploying an LPS-enabled desktop image while preserving user files and settings; configuring User Account Control on multiple computers with Group Policy; Application Compatibility shims; deploying applications using Group Policy Software Installation (GPSI) and Windows Installer; creating MSI wrappers for legacy setup programs; installing per-machine ActiveX Controls with ActiveX Installer Service (AxIS); deploying default Software Restriction Policy (SRP) or AppLocker rules; and blacklisting applications with SRP or AppLocker.

This practical handbook for System Administrators or desktop support staff wanting to implement Least Privilege Security on Windows systems gives detailed step-by-step instructions, solutions to common technical challenges, and Microsoft best practice advice. Topics covered include: applying LPS to categories of users; getting management buy-in; using Microsoft's Application Compatibility Toolkit (ACT) to identify potential compatibility problems; preparing and deploying an LPS-enabled desktop image while preserving user files and settings; configuring User Account Control on multiple computers with Group Policy; Application Compatibility shims; deploying applications using Group Policy Software Installation (GPSI) and Windows Installer; creating MSI wrappers for legacy setup programs; installing per-machine ActiveX Controls with ActiveX Installer Service (AxIS); deploying default Software Restriction Policy (SRP) or AppLocker rules; and blacklisting applications with SRP or AppLocker.

Russell Smith is an independent IT consultant who specializes in management and security of Microsoft-based IT systems. An MCSE with more than ten years experience, his recent projects include Active Directory Security Consultant for the UK Health Service National Programme for Information Technology (NPfIT) and Exchange Architect for Wipro Technologies.

Russell is a regular contributor to industry journals Windows IT Professional, Security Professional VIP, CDW's Biztech Magazine and a contributing author to Supporting and Troubleshooting Applications on a Microsoft Windows Vista Client for Enterprise Support Technicians from Microsoft's Official Academic Course (MOAC) series of books published by Wiley and Sons. Russell also has extensive experience as an IT trainer.