Can someone please help me with this small problem, we have started a legacy network in our school and has been running from September with little problems here and there but nothing that hasnít been able to get sorted thanks to this site.
I am finding more and more pupils are using their usb memory sticks to run games and i wanted to know now that i have the system running can I stop .exe from running on memory sticks as well as on their my documents. Also I have run into a pupil who is able to access cmd prompt all be it he hasnít been able to do anything serious but I want to stop cmd prompt access completely so no .bat files or anything can be run for pupils. I have this enabled in GPO that they cannot access cmd but he still finds ways round.
Is it possible to disable .exe from running on memory sticks? I have this morning changed security settings while reading this post and I will see how this affects computers on Monday morning. I have changed all settings on computers and pupils security to default security but I was thinking of changing this to disallowed and stopping access to everything and really release access when I am asked.
Please any help with this would be much appreciated
We use software restriction policy for this and it works well, it has the added benefit that you can prevent the running of exes from anywhere other than areas that you explicitly allow.
which software restrictions have you in place to stop this?
Go have a look at post 5 in the thread I've linked to above. As I said, there are detailed steps there.
And the link below and example.
http://www.edugeek.net/forums/networ...-software.htmlCode:%AllUsersProfile%\Desktop\ Path Unrestricted %AllUsersProfile%\Start Menu\ Path Unrestricted %AppData% Path Unrestricted %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% Path Unrestricted %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir% Path Unrestricted %SystemRoot%\System32\runas.exe Path Disallowed %UserProfile%\Desktop\ Path Unrestricted %UserProfile%\Local Settings\Temp\ Path Disallowed %UserProfile%\Start Menu\ Path Unrestricted *.mdb Path Unrestricted
I have followed through this thread but I'm still having problems getting my policy to take effect.
I have a user GPO set for students which restricts their home drives, flash drives etc. I have all the default Designated File Types in there which work well. But any additional file types I add in (such as swf) don't work and can still be opened.
Can anyone help me?
There are currently 1 users browsing this thread. (0 members and 1 guests)