Printable View
we having alot of trouble with kids bringing exe files in from home. Most games.
I seen there is software that can scan the stcks when they are plugged in. it compares the contents to a black list of file types.
this sort of software is into the thousands!!!!
Has any one used this type of software or know of a better way and cheaper way to getting round this?
If you're using Windows 2003 DCs and Windows XP Workstations, you're better off setting up a software restriction policy. Set up the policy to deny everything by default then set up a whitelist to allow certain programs and/or paths only.
With this set up properly, when a kiddywink tries to run a program from a memory stick or from their personal areas it says "This software can not be run due to a software restriction policy" or words to that effect :)
/edit see this for more information
this sounds like a good idea.Quote:
Originally Posted by Norphy
If i set it to block exe files, wont it stop legit exe files from being run from a multmedia server?
Set it so it blocks the drive letter... like we have got d: e: f: g: and u: (users home drive) but staff have got e: f: g: and u: as some teachers need to access cds.
I've found that if you want to allow executables from a network drive, you need to enter the UNC of the network drive rather than the mapped letter but other than that it works :)