Windows 7 Thread, Students Installing to Profile Folder on Desktops in Technical; Students are only domain users and are not local administrators of the machines. I do not currently have software restrictions ...
19th September 2011, 05:16 PM #1
- Rep Power
Students Installing to Profile Folder on Desktops
Students are only domain users and are not local administrators of the machines. I do not currently have software restrictions turned on.
Users have been able to download firefox and then when installing click cancel on the UAC prompt and then the software installs to the profile folder on the machine.
How do I disable all profile folder installs? It's driving me insane that they are able to install stuff, yet they aren't a local admin.
IDG Tech News
19th September 2011, 05:27 PM #2
1) Set up a redirection desktop and deny permissions to write files to it?
2) Set up a software restriction policy in GP that denys .exe from running from the locations you specify
3) If you use Symantec AV (Others can probably do it as well) you can set that to disallow programs from running.
19th September 2011, 05:27 PM #3
redirect the profile to a share and ban the filesystem from saving .exe .dll etc.
19th September 2011, 05:43 PM #4
- Rep Power
I'm liking option #2, but I've never looked into the giant ax that is software restrictions. Is it possible to precisely define that any software trying to run from C:\Users\%username% will not run, but everything else from (which is preloaded from me) will run okay?
19th September 2011, 06:43 PM #5
I've just done it here - if you use a software restriction policy and then create a hash on both firefox.exe and firefoxsetup.exe it blocks it from running (even with a different name) - if let them install it and watch the smile come off there face when it won't run
19th September 2011, 07:15 PM #6
Our of interest anyone whos running Windows 7 enterprise have you tried AppLocker and how did you find it?
pmaryan, best way to set up software restriction is make a test account and only apply the policy to that one account. Then you can figure out what to block and if you do block any important stuff by mistake atleast it's only effecting your test
By Rawns in forum General Chat
Last Post: 8th June 2011, 11:21 AM
Last Post: 9th May 2007, 06:45 PM
By projector1 in forum Windows
Last Post: 25th January 2007, 12:39 AM
Last Post: 2nd November 2005, 12:51 PM
By tosca925 in forum Windows
Last Post: 20th October 2005, 07:48 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)