Is there a way to prevent/authorize specific users from creating program
aliases while still allowing them to create regular aliases?
Consider this... Any user can create a program alias. This program runs
under the same account that the SMTP service is running under. A user could
create an alias to run c:\imail\imail1.exe and mail themselves your SAM
files or anything else.
I've got imail services running under a special account with very limited
privs but would still like to prevent the program alias from being created.
How many of you are running Imail services as 'system'? - Ouch! don't
answer that.
