+ Post New Thread
Results 1 to 10 of 10
How do you do....it? Thread, Allow EXE from USB drive in Technical; I know HOW to do it, but it isn't working. Currently, we've set "TotalLock.exe" to be allowed, but it doesn't ...
  1. #1

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,144
    Thank Post
    596
    Thanked 1,961 Times in 1,359 Posts
    Blog Entries
    19
    Rep Power
    818

    Question Allow EXE from USB drive

    I know HOW to do it, but it isn't working.

    Currently, we've set "TotalLock.exe" to be allowed, but it doesn't let us set a file path. So the "No USB EXE files" policy is taking over.

    I know I can't set the file path to use the volume label instead of the drive letter [Stupid windows, why can't you be Unix based.] but I don't want to use the GUID as it's going to be different everywhere [If you know how to force the GUID, that would be handy.]

    I'm hesitant to try with an absolute drive letter [D:\ in this case] as, depending on how many other USB drives are in use and what order they're attached, the drive letter could be different.


    We're running XP with Server 2003, with CC3 gubbins.

  2. #2
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,354
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Quote Originally Posted by X-13 View Post
    I know HOW to do it, but it isn't working.

    Currently, we've set "TotalLock.exe" to be allowed, but it doesn't let us set a file path. So the "No USB EXE files" policy is taking over.

    I know I can't set the file path to use the volume label instead of the drive letter [Stupid windows, why can't you be Unix based.] but I don't want to use the GUID as it's going to be different everywhere [If you know how to force the GUID, that would be handy.]

    I'm hesitant to try with an absolute drive letter [D:\ in this case] as, depending on how many other USB drives are in use and what order they're attached, the drive letter could be different.


    We're running XP with Server 2003, with CC3 gubbins.
    cant figure this one out! - Cant access USB drive . . .

    Have you checked that out, looks like the file itself copies to the C: drive to run so could be the cause?

  3. #3

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,144
    Thank Post
    596
    Thanked 1,961 Times in 1,359 Posts
    Blog Entries
    19
    Rep Power
    818
    Quote Originally Posted by Jamo View Post
    Have you checked that out, looks like the file itself copies to the C: drive to run so could be the cause?
    Woops. I managed to figure out sharing it [then allowing \\%computername%\TotalLock] as a file path for exe files... But I totally forgot about changing permissions.


    Le EDIT: Yup... that made absolutely no difference.
    Last edited by X-13; 15th October 2012 at 01:50 PM.

  4. #4
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,800
    Thank Post
    215
    Thanked 264 Times in 214 Posts
    Rep Power
    67
    The more specific rule always wins in this Group policy. So you should just block exes on all USB drives then specify the hash of the program and it'll work, as it's more specific. (have not tried this but I do remember from training)

  5. #5
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22
    Quote Originally Posted by chazzy2501 View Post
    The more specific rule always wins in this Group policy. So you should just block exes on all USB drives then specify the hash of the program and it'll work, as it's more specific. (have not tried this but I do remember from training)
    I am trying to get a piece software to run on one teachers USB Hard Drive and I have been playing with Software Restriction Policies all morning and still I am no further forward. I have created a hash rule and the program just will not run. This is the details below, has anyone had this running. The drive is a Western Digital "My Passport"

    Unlock.exe (1.4.0.14)WdUnlock.exe
    Unlock Utility for WD SmartWare
    WD SmartWare
    Western Digital

  6. #6
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    732
    Thank Post
    53
    Thanked 189 Times in 125 Posts
    Rep Power
    101
    If you're running CC3 just enable a file rule for the particular exe.

  7. #7
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22
    Its a Vanilla network, Server 2008R2 and windows 7 clients

  8. #8
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    732
    Thank Post
    53
    Thanked 189 Times in 125 Posts
    Rep Power
    101
    Sorry, the OP mentioned CC3

  9. #9
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22
    Quote Originally Posted by clareq View Post
    Sorry, the OP mentioned CC3
    your right I didn't notice that

  10. #10
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22
    I have found a possible solution and I thought I would share it, I found it here http://www.raymond.cc/ but instead of using a shortcut I have used a trigger of when the user logs on. Fingers crossed this will work. I have used a unique admin account so I can disable it if there are any issues.

    Here are the steps on how to make a program run under Task Scheduler with the highest privileges to bypass the UAC prompt.1. Click the Start button and type Task Scheduler on the search programs and files bar and hit enter.
    2. Click Action from the menubar and select Create Tasks.

    3. You will need to fill up the Name and Description box and check the Run with highest privileges checkbox.
    4. Go to Actions tab and click the New button.
    5. Make sure that “Start a program” option is selected and browse for the program that you want to run without UAC prompt and click OK. Optionally you can also specify the command line arguments if required.

    6. Now go to Settings tab and make sure that “Allow task to be run on demand” is selected. Click the OK button to create the task and you should see the task being added to the Task Scheduler.
    7. You can either manually run the program directly from Task Scheduler by right clicking on the task and select Run, or create a shortcut which is very useful when you want to put it on startup. To create a shortcut, right click on Desktop, select New > Shortcut. Type the following location at the box and click Next.
    schtasks /run /TN "X-Ray"

    You will need to change the X-Ray that is between the double quotes to the name of the task which you’ve used in step 3. You can set any name for the shortcut and click the Finish button. Whenever you need to run the program without the annoying UAC prompt, simply run the shortcut which you’ve created. You can even put the shortcut in Startup folder so that it runs in highest privileges without prompting you to allow the following program to make changes to this computer.
    If you totally disable the UAC, you don’t need this but it is good to know that there is a way to bypass the UAC restriction using Task Scheduler. If you have UAC enabled and would like to keep it that way, then you may find this tip useful if you need to run certain programs that requires elevation on Windows startup.

SHARE:
+ Post New Thread

Similar Threads

  1. does anyone have any idea how to prevent exe's being run from usb drives on rm cc3
    By Oaktech in forum Network and Classroom Management
    Replies: 6
    Last Post: 13th June 2012, 12:38 PM
  2. Cannot copy from USB drive
    By Gerry in forum Hardware
    Replies: 4
    Last Post: 20th May 2010, 12:03 PM
  3. Block exe from USB - Again
    By jmair in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 26th March 2010, 08:30 PM
  4. Banning exes on USB drives
    By cookie_monster in forum Windows
    Replies: 10
    Last Post: 11th November 2009, 10:48 PM
  5. Blocking .exe from USB drives
    By mmoseley in forum Network and Classroom Management
    Replies: 2
    Last Post: 18th July 2007, 08:35 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •