+ Post New Thread
Results 1 to 9 of 9
How do you do....it? Thread, Group policy blocking exe's in Technical; Hi all! I have created a gpo to block students from running specific .exe's tested it works fine however done ...
  1. #1

    Join Date
    Jun 2010
    Location
    London
    Posts
    7
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Talking Group policy blocking exe's

    Hi all!


    I have created a gpo to block students from running specific .exe's tested it works fine however done another test by renaming the .exe and it bypasses the gpo which a student can do if he or she finds out


    does anyone know of a way to prevent this from happening or is their another gpo im am missing



    Thanks guys!

  2. #2

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Depends on what you're running, but you'd want hash rules really. As you found out "path" rules, are exactly that, the path or nothing

    Steve

  3. #3

    Join Date
    Jun 2010
    Location
    London
    Posts
    7
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Yes thats true however I think hash rules only works for windows application i.e notepad, regedit etc.

    sorry didnt explain properly I mean programs e.g. if a user downloads utorrent.exe from the internet

    sorry its a new school network lol

  4. #4

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by tuns8 View Post
    Yes thats true however I think hash rules only works for windows application i.e notepad, regedit etc.

    sorry didnt explain properly I mean programs e.g. if a user downloads utorrent.exe from the internet

    sorry its a new school network lol
    Hashes should work on anything, just means new utorrent versions will have seperate hashes etc

    Steve

  5. Thanks to Steve21 from:

    tuns8 (3rd May 2012)

  6. #5


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,792
    Thank Post
    262
    Thanked 2,964 Times in 2,179 Posts
    Rep Power
    846
    You could also block by publisher if you have AppLocker? For µTorrent that would be BitTorrent Inc.


  7. Thanks to Arthur from:

    tuns8 (3rd May 2012)

  8. #6

    Join Date
    Jun 2010
    Location
    London
    Posts
    7
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Thanks Steve your right! mate I created a hash rule for utorrent and it works

  9. #7

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by tuns8 View Post
    Thanks Steve your right! mate I created a hash rule for utorrent and it works
    Just remember a hash is for "an exe", If there's new versions it'll most likely change hash. So if you can do publisher blocks as Arthur said above, might be worth doing it Saves updating hashes etc.

    Steve

  10. #8

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,679
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    46
    I've gone for using USB Drive LEtter Manager (DSBDLM) to restrict USB drives to certain drive letters. Then I use Group Policy Software Restriction policies to block all exe and exe type files from those drive letters.

  11. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by Stuart_C View Post
    I've gone for using USB Drive LEtter Manager (DSBDLM) to restrict USB drives to certain drive letters. Then I use Group Policy Software Restriction policies to block all exe and exe type files from those drive letters.
    Won't they still run if they just copy it locally then? (Or is their homedrive etc blocked seperately)

    Steve



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 6th October 2010, 10:04 PM
  2. Group Policy Blocking Flash
    By FN-GM in forum Windows Server 2008
    Replies: 8
    Last Post: 13th October 2009, 11:06 AM
  3. blocking .exes using group policy
    By Neville in forum Windows
    Replies: 2
    Last Post: 8th May 2009, 01:37 PM
  4. Allowed .exe files within Group Policy Management
    By FrogmoreIT in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 26th January 2009, 12:53 PM
  5. Blocking Batch Files using Group Policy in Server 2003
    By markwilliamson2001 in forum Windows
    Replies: 13
    Last Post: 4th October 2005, 06:28 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •