DOCUMENT:Q149978 08-NOV-2001 [homemm] TITLE :Restricted User Security Issues when Using Microsoft Programs PRODUCT :Microsoft Home Multimedia Titles PROD/VER::1.0,1996 edition,1997 edition OPER/SYS: KEYWORDS: ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Bookshelf '95 for Windows 95 - Microsoft Bookshelf 1996-97 for Windows - Microsoft Cinemania for Windows versions 1996 edition, 1997 edition - Microsoft Complete Gardening for Windows, version 1.0 - Microsoft Complete NBA Basketball for Windows, 1994-1995, 1995-1996 editions - Microsoft Encarta 96 Encyclopedia for Windows - Microsoft Encarta 95 The Complete Interactive Multimedia Encyclopedia for Macintosh - Microsoft Encarta 96 World Atlas for Windows - Microsoft Music Central for Windows, 1996, 1997 edition - Microsoft Reader's Digest Complete Do-It-Yourself Guide for Windows, version 1.0 - Microsoft Works for Windows 95, version 4.0 - Microsoft Encarta 97 Encyclopedia for Windows - Microsoft Encarta Encyclopedia 97 Deluxe for Windows ------------------------------------------------------------------------------- SUMMARY ======= The Microsoft programs listed at the top of this article provide the user with command lines to run executable files. If your system is configured to place security restrictions on running certain programs, this could potentially provide the user with a way to bypass your restrictions. The command line access is an integral part of these programs and cannot be disabled. MORE INFORMATION ================ You can configure a computer system to prevent users from accessing executable programs. For example, you can disable the Run command in Explorer and restrict access to Files and Folders so users can not locate programs and execute them. However, you should be aware that many programs, including the programs listed at the top of this article, provide command lines for running programs. For example, in Microsoft Works 4.0, the user can access Microsoft System Information 2.5 (Msinfo32) through the Help menu. MSINFO32 has a Run command on the File menu. This lets users enter program names and run them, or browse available drives to find executable programs. MSINFO32 is available in many of Microsoft's programs marked with the Designed for Windows 95 logo. In addition to a Run command, some programs have other methods to access executable files. Encarta, for example, uses a keyboard shortcut, CTRL+W, to activate a word processor. Encarta can be configured to activate any executable program when using CTRL+W. If you provide users with the rights to run these programs, you should consider how this might affect your system security plans. The command line access is an integral part of these programs and cannot be disabled. Accessing Msinfo32 ------------------ To access Msinfo32, do the following: 1. Start the Microsoft program. 2. On the Help menu, click About , where product name is the Microsoft program you started in Step 1. 3. Click the System Info... button. Additional query words: multi media multimedia multi-media mmtitles kbmm ====================================================================== Keywords : Technology : kbHWMAC kbOSMAC kbHomeProdSearch kbWorksSearch kbHomeMMsearch kbEncartaSearch kbGamesSearch kbZNotKeyword kbBookshelfSearch kbEncartaEncycSearch kbZNotKeyword3 kbCineManiaSearch kbCompleteBasketballSearch kbBookShelf1995 kbBookShelf1996 kbBookShelf1997 kbCinemania1996 kbCinemania1997 kbCompleteGardening kbMusicCentral kbCompleteNBABasketball1994 kbEncartaEnCyc1996 kbEncartaEnCyc1997 kbEncartaEnCyc1997Del kbEncartaEnCyc1995Mac kbEncartaWorldAtlas1996 kbMusicCentral1996 kbMusicCentral1997 kbDoItYourself Version : :1.0,1996 edition,1997 edition ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2001.