+ Post New Thread
Results 1 to 7 of 7
Windows Server 2000/2003 Thread, prevent running .exe from ZIP files in Technical; I am the network manager in a school. 2003 and xp domain. I can prevent exe files from running Ok. ...
  1. #1

    Join Date
    Jan 2007
    Location
    Bacton
    Posts
    17
    Thank Post
    2
    Thanked 4 Times in 4 Posts
    Rep Power
    17

    Angry prevent running .exe from ZIP files

    I am the network manager in a school. 2003 and xp domain.

    I can prevent exe files from running Ok. But when a student double clicks on an exe file from within a ZIP it runs ok. I have tried to prevent running ZIP files but could not stop them. by Using security settings in a GPO.

    Using Software Restriction Policies to Protect Against Unauthorized Software

    Any thoughts on preventing these exe from running.

    Thanks

  2. #2
    k-strider's Avatar
    Join Date
    Oct 2006
    Location
    Gloucester
    Posts
    358
    Thank Post
    7
    Thanked 40 Times in 30 Posts
    Rep Power
    24
    i got around this by setting the policy to not run any EXEs by default, and then enabling the running of EXEs (exceptions) from %windir% %programfiles% any network location that requires them.

    i tried at one stage to prevent this too but the zip runs the exe from the users temp folder which would be in the %appdata% folder. in the end i bit the bullet and disabled the running of exes and vbs and cmd etc etc and just making a list of exceptions only around 20

    Software Restriction Policies/Security Levels
    Policy Setting
    Default Security Level Disallowed
    Software Restriction Policies/Additional Rules
    Path Rules
    %LOGONSERVER%\NETLOGON
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 10:45:30
    %logonserver%\sysvol
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 11:24:07
    %programfiles%
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 10:58:56
    %windir%
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 11:03:39
    \\Myserver\netlogon
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 11:35:12
    \\Myserver\sysvol
    Security Level Unrestricted
    Description
    Date last modified 29/02/2008 11:35:21
    \\mydfs\dfs\programs
    Security Level Unrestricted
    Description
    Date last modified

  3. Thanks to k-strider from:

    theaman (11th June 2009)

  4. #3

    Join Date
    Jan 2007
    Location
    Bacton
    Posts
    17
    Thank Post
    2
    Thanked 4 Times in 4 Posts
    Rep Power
    17
    I will give it a go

    thanks

  5. #4

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,422
    Thank Post
    645
    Thanked 967 Times in 667 Posts
    Blog Entries
    2
    Rep Power
    328
    When EXEs are ran from within ZIP files, I think they get copied to %temp% - so restricting this folder should work.

  6. 2 Thanks to webman:

    Fonz_Valo (3rd December 2010), theaman (11th June 2009)

  7. #5

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    You should in theory be able to prevent ZIP files opening just as you would exe's.

  8. #6

    Join Date
    Jan 2007
    Location
    Bacton
    Posts
    17
    Thank Post
    2
    Thanked 4 Times in 4 Posts
    Rep Power
    17
    Thanks all that's done the trick

  9. #7
    AlexB's Avatar
    Join Date
    Jul 2006
    Location
    Warwickshire
    Posts
    417
    Thank Post
    40
    Thanked 51 Times in 43 Posts
    Rep Power
    26
    Be careful with restricting exes in the %temp% folder, we had a problem with some older serif software not working because it copied stuff to the %temp% folder to run



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 21st March 2012, 01:10 PM
  2. [MS Office - 2003] Outlook doesn't display zip files in the Insert file dialog
    By firefox_2006 in forum Office Software
    Replies: 0
    Last Post: 5th November 2008, 10:35 AM
  3. Docx files opening at zip files
    By tomscaper in forum Office Software
    Replies: 20
    Last Post: 18th September 2008, 11:37 AM
  4. svchost.exe running @ 100%
    By nawbus in forum Windows
    Replies: 22
    Last Post: 13th April 2007, 09:59 PM
  5. Replies: 2
    Last Post: 3rd February 2006, 11:01 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •