AzefWetaly
Advanced Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
http://technet.microsoft.com/en-us/library/bb457160.aspx
Цитата:
Procedures for Preventing Root Certificates from Being Updated on an Individual Computer
The following procedures describe:
How to use Group Policy to disable the Update Root Certificates component on users’ computers.
How to use Control Panel to remove the Update Root Certificates component from an individual computer running Windows XP with SP2.
How to exclude the Update Root Certificates component during unattended installation of Windows XP with SP2 by using an answer file.
To Disable the Update Root Certificates Component by Using Group Policy
See Appendix B, "Learning About Group Policy and Updating Administrative Templates,” for information about using Group Policy. Ensure that your Administrative templates have been updated, and then edit an appropriate GPO.
Click Computer Configuration, click Administrative Templates, click System, click Internet Communication Management, and then click Internet Communication settings.
In the details pane, double-click Turn off Automatic Root Certificates Update, and then click Enabled.
Important You can also restrict Internet access for this and a number of other components by applying the Restrict Internet communication policy setting, which is located in Computer Configuration/Administrative Templates/System/Internet Communication Management. For more information about this Group Policy and the policies that it controls, see Appendix C, "Group Policy Settings Listed Under the Internet Communication Management Key."
To Remove the Update Root Certificates Component from an Individual Computer Running Windows XP with SP2
Click Start, and then either click Control Panel, or point to Settings and then click Control Panel.
Double-click Add or Remove Programs.
Click Add/Remove Windows Components (on the left).
Scroll down the list of components to Update Root Certificates, and make sure the check box for that component is cleared.
Follow the instructions to complete the Windows Components Wizard.
To Exclude the Update Root Certificates Component During Unattended Installation by Using an Answer File
Using the methods you prefer for unattended installation or remote installation, create an answer file. For more information about unattended and remote installation, see Appendix A, "Resources for Learning About Automated Installation and Deployment."
In the [Components] section of the answer file, include the following entry:
Rootautoupdate = Off
|
|
)) 