KnowledgeBase Archive

An Archive of Early Microsoft KnowledgeBase Articles

View on GitHub

Q149978: Restricted User Security Issues when Using Microsoft Programs

Article: Q149978
Product(s): Microsoft Home Multimedia Titles
Version(s): 1.0,1996 edition,1997 edition
Operating System(s): 
Keyword(s): 
Last Modified: 08-NOV-2001

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Bookshelf '95 for Windows 95 
- Microsoft Bookshelf 1996-97 for Windows 
- Microsoft Cinemania for Windows versions 1996 edition, 1997 edition 
- Microsoft Complete Gardening for Windows, version 1.0 
- Microsoft Complete NBA Basketball for Windows, 1994-1995, 1995-1996 editions 
- Microsoft Encarta 96 Encyclopedia for Windows 
- Microsoft Encarta 95 The Complete Interactive Multimedia Encyclopedia for Macintosh 
- Microsoft Encarta 96 World Atlas for Windows 
- Microsoft Music Central for Windows, 1996, 1997 edition 
- Microsoft Reader's Digest Complete Do-It-Yourself Guide for Windows, version 1.0 
- Microsoft Works for Windows 95, version 4.0 
- Microsoft Encarta 97 Encyclopedia for Windows 
- Microsoft Encarta Encyclopedia 97 Deluxe for Windows 
-------------------------------------------------------------------------------

SUMMARY
=======

The Microsoft programs listed at the top of this article provide the user with
command lines to run executable files. If your system is configured to place
security restrictions on running certain programs, this could potentially
provide the user with a way to bypass your restrictions.

The command line access is an integral part of these programs and cannot be
disabled.

MORE INFORMATION
================

You can configure a computer system to prevent users from accessing executable
programs. For example, you can disable the Run command in Explorer and restrict
access to Files and Folders so users can not locate programs and execute them.
However, you should be aware that many programs, including the programs listed
at the top of this article, provide command lines for running programs.

For example, in Microsoft Works 4.0, the user can access Microsoft System
Information 2.5 (Msinfo32) through the Help menu. MSINFO32 has a Run command on
the File menu. This lets users enter program names and run them, or browse
available drives to find executable programs. MSINFO32 is available in many of
Microsoft's programs marked with the Designed for Windows 95 logo.

In addition to a Run command, some programs have other methods to access
executable files. Encarta, for example, uses a keyboard shortcut, CTRL+W, to
activate a word processor. Encarta can be configured to activate any executable
program when using CTRL+W.

If you provide users with the rights to run these programs, you should consider
how this might affect your system security plans.

The command line access is an integral part of these programs and cannot be
disabled.

Accessing Msinfo32
------------------

To access Msinfo32, do the following:

1. Start the Microsoft program.

2. On the Help menu, click About <product name>, where product name is the
  Microsoft program you started in Step 1.

3. Click the System Info... button.

Additional query words: multi media multimedia multi-media mmtitles kbmm

======================================================================
Keywords          :  
Technology        : kbHWMAC kbOSMAC kbHomeProdSearch kbWorksSearch kbHomeMMsearch kbEncartaSearch kbGamesSearch kbZNotKeyword kbBookshelfSearch kbEncartaEncycSearch kbZNotKeyword3 kbCineManiaSearch kbCompleteBasketballSearch kbBookShelf1995 kbBookShelf1996 kbBookShelf1997 kbCinemania1996 kbCinemania1997 kbCompleteGardening kbMusicCentral kbCompleteNBABasketball1994 kbEncartaEnCyc1996 kbEncartaEnCyc1997 kbEncartaEnCyc1997Del kbEncartaEnCyc1995Mac kbEncartaWorldAtlas1996 kbMusicCentral1996 kbMusicCentral1997 kbDoItYourself
Version           : :1.0,1996 edition,1997 edition

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.