Least Privilege Security for Windows 7, Vista and XP

This practical handbook for System Administrators or desktop support staff wanting to implement Least Privilege Security on Windows systems gives detailed step-by-step instructions, solutions to common technical challenges, and Microsoft best practice advice. Topics covered include: applying LPS to categories of users; getting management buy-in; using Microsoft's Application Compatibility Toolkit (ACT) to identify potential compatibility problems; preparing and deploying an LPS-enabled desktop image while preserving user files and settings; configuring User Account Control on multiple computers with Group Policy; Application Compatibility shims; deploying applications using Group Policy Software Installation (GPSI) and Windows Installer; creating MSI wrappers for legacy setup programs; installing per-machine ActiveX Controls with ActiveX Installer Service (AxIS); deploying default Software Restriction Policy (SRP) or AppLocker rules; and blacklisting applications with SRP or AppLocker.