+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 23 of 23
Windows Server 2000/2003 Thread, Preventing File Extensions through GPO in Technical; Originally Posted by techie211 did you push down the .msi? how did you edit the USBDLM.INI? did you unpack the ...
  1. #16
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    813
    Thank Post
    88
    Thanked 179 Times in 147 Posts
    Rep Power
    66
    Quote Originally Posted by techie211 View Post
    did you push down the .msi? how did you edit the USBDLM.INI? did you unpack the msi first? I want to use the .msi because of the quantity of computers we have but not sure how 'assigning the drive letters' works this way.
    If anyone has any input on this I'd appreciate it.
    I made a script to robocopy the program and associated files over to the client. I then used the same script to run a silent install (USBDLM -silentinstall) to register the service.

  2. #17
    Aaron's Avatar
    Join Date
    Feb 2009
    Location
    N.Ireland
    Posts
    251
    Thank Post
    78
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Everyone.

    Can someone please help me with this small problem, we have started a legacy network in our school and has been running from September with little problems here and there but nothing that hasnít been able to get sorted thanks to this site.

    I am finding more and more pupils are using their usb memory sticks to run games and i wanted to know now that i have the system running can I stop .exe from running on memory sticks as well as on their my documents. Also I have run into a pupil who is able to access cmd prompt all be it he hasnít been able to do anything serious but I want to stop cmd prompt access completely so no .bat files or anything can be run for pupils. I have this enabled in GPO that they cannot access cmd but he still finds ways round.

    Is it possible to disable .exe from running on memory sticks? I have this morning changed security settings while reading this post and I will see how this affects computers on Monday morning. I have changed all settings on computers and pupils security to default security but I was thinking of changing this to disallowed and stopping access to everything and really release access when I am asked.

    Please any help with this would be much appreciated

  3. #18

    Join Date
    Dec 2008
    Location
    Plymouth
    Posts
    63
    Thank Post
    6
    Thanked 10 Times in 7 Posts
    Rep Power
    14
    You'll find detailed instructions on this thread, which several others have linked to further above: Stopping .exe files from being run from a USB stick

  4. #19
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,205
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    We use software restriction policy for this and it works well, it has the added benefit that you can prevent the running of exes from anywhere other than areas that you explicitly allow.

  5. #20
    Aaron's Avatar
    Join Date
    Feb 2009
    Location
    N.Ireland
    Posts
    251
    Thank Post
    78
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    which software restrictions have you in place to stop this?

  6. #21

    Join Date
    Dec 2008
    Location
    Plymouth
    Posts
    63
    Thank Post
    6
    Thanked 10 Times in 7 Posts
    Rep Power
    14
    Go have a look at post 5 in the thread I've linked to above. As I said, there are detailed steps there.

  7. #22
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,205
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by Tamarside View Post
    Go have a look at post 5 in the thread I've linked to above. As I said, there are detailed steps there.

    And the link below and example.

    Code:
    %AllUsersProfile%\Desktop\ Path Unrestricted
    %AllUsersProfile%\Start Menu\ Path Unrestricted
    %AppData% Path Unrestricted
    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% Path Unrestricted
    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir% Path Unrestricted
    %SystemRoot%\System32\runas.exe Path Disallowed
    %UserProfile%\Desktop\ Path Unrestricted
    %UserProfile%\Local Settings\Temp\ Path Disallowed
    %UserProfile%\Start Menu\ Path Unrestricted
    *.mdb Path Unrestricted
    http://www.edugeek.net/forums/networ...-software.html

  8. #23

    Join Date
    Nov 2010
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Question

    I have followed through this thread but I'm still having problems getting my policy to take effect.

    I have a user GPO set for students which restricts their home drives, flash drives etc. I have all the default Designated File Types in there which work well. But any additional file types I add in (such as swf) don't work and can still be opened.

    Can anyone help me?

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. VBScript, wildcards or file extensions
    By Bobo in forum Windows
    Replies: 4
    Last Post: 25th August 2011, 04:58 PM
  2. extensions
    By tea_and_toast in forum EduGeek Joomla 1.0 Package
    Replies: 5
    Last Post: 8th November 2008, 09:24 PM
  3. Stop file downloads though GPO.
    By boomam in forum Windows
    Replies: 7
    Last Post: 26th February 2008, 05:24 PM
  4. File Extensions
    By Gatt in forum Windows
    Replies: 5
    Last Post: 31st January 2007, 01:29 PM
  5. Deploy the contents of a CAB file through GPO?
    By tosca925 in forum Windows
    Replies: 0
    Last Post: 16th October 2005, 12:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •