exe files on usb sticks

[goodhead]

we having alot of trouble with kids bringing exe files in from home. Most games.

I seen there is software that can scan the stcks when they are plugged in. it compares the contents to a black list of file types.

this sort of software is into the thousands!!!!

Has any one used this type of software or know of a better way and cheaper way to getting round this?

[Norphy]

If you're using Windows 2003 DCs and Windows XP Workstations, you're better off setting up a software restriction policy. Set up the policy to deny everything by default then set up a whitelist to allow certain programs and/or paths only.

With this set up properly, when a kiddywink tries to run a program from a memory stick or from their personal areas it says "This software can not be run due to a software restriction policy" or words to that effect

/edit see this for more information

[goodhead]

If you're using Windows 2003 DCs and Windows XP Workstations, you're better off setting up a software restriction policy. Set up the policy to deny everything by default then set up a whitelist to allow certain programs and/or paths only.

With this set up properly, when a kiddywink tries to run a program from a memory stick or from their personal areas it says "This software can not be run due to a software restriction policy" or words to that effect

/edit see this for more information

this sounds like a good idea.
If i set it to block exe files, wont it stop legit exe files from being run from a multmedia server?

[timbo343]

Set it so it blocks the drive letter... like we have got d: e: f: g: and u: (users home drive) but staff have got e: f: g: and u: as some teachers need to access cds.

[Norphy]

I've found that if you want to allow executables from a network drive, you need to enter the UNC of the network drive rather than the mapped letter but other than that it works