Windows Server 2000/2003 Thread, Preventing File Extensions through GPO in Technical; Originally Posted by techie211
did you push down the .msi? how did you edit the USBDLM.INI? did you unpack the ...
12th February 2009, 11:51 AM #16
I made a script to robocopy the program and associated files over to the client. I then used the same script to run a silent install (USBDLM -silentinstall) to register the service.
Originally Posted by techie211
8th January 2010, 03:47 PM #17
Can someone please help me with this small problem, we have started a legacy network in our school and has been running from September with little problems here and there but nothing that hasnít been able to get sorted thanks to this site.
I am finding more and more pupils are using their usb memory sticks to run games and i wanted to know now that i have the system running can I stop .exe from running on memory sticks as well as on their my documents. Also I have run into a pupil who is able to access cmd prompt all be it he hasnít been able to do anything serious but I want to stop cmd prompt access completely so no .bat files or anything can be run for pupils. I have this enabled in GPO that they cannot access cmd but he still finds ways round.
Is it possible to disable .exe from running on memory sticks? I have this morning changed security settings while reading this post and I will see how this affects computers on Monday morning. I have changed all settings on computers and pupils security to default security but I was thinking of changing this to disallowed and stopping access to everything and really release access when I am asked.
Please any help with this would be much appreciated
11th January 2010, 08:12 AM #18
- Rep Power
You'll find detailed instructions on this thread, which several others have linked to further above: Stopping .exe files from being run from a USB stick
11th January 2010, 08:25 AM #19
We use software restriction policy for this and it works well, it has the added benefit that you can prevent the running of exes from anywhere other than areas that you explicitly allow.
11th January 2010, 09:12 AM #20
which software restrictions have you in place to stop this?
11th January 2010, 09:15 AM #21
- Rep Power
Go have a look at post 5 in the thread I've linked to above. As I said, there are detailed steps there.
11th January 2010, 09:27 AM #22
Originally Posted by Tamarside
And the link below and example.
%AllUsersProfile%\Desktop\ Path Unrestricted
%AllUsersProfile%\Start Menu\ Path Unrestricted
%AppData% Path Unrestricted
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% Path Unrestricted
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir% Path Unrestricted
%SystemRoot%\System32\runas.exe Path Disallowed
%UserProfile%\Desktop\ Path Unrestricted
%UserProfile%\Local Settings\Temp\ Path Disallowed
%UserProfile%\Start Menu\ Path Unrestricted
*.mdb Path Unrestricted
29th November 2010, 01:24 AM #23
- Rep Power
I have followed through this thread but I'm still having problems getting my policy to take effect.
I have a user GPO set for students which restricts their home drives, flash drives etc. I have all the default Designated File Types in there which work well. But any additional file types I add in (such as swf) don't work and can still be opened.
Can anyone help me?
Last Post: 25th August 2011, 04:58 PM
By tea_and_toast in forum EduGeek Joomla 1.0 Package
Last Post: 8th November 2008, 09:24 PM
By boomam in forum Windows
Last Post: 26th February 2008, 05:24 PM
Last Post: 31st January 2007, 01:29 PM
By tosca925 in forum Windows
Last Post: 16th October 2005, 12:46 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)