+ Post New Thread
Results 1 to 5 of 5
Windows Server 2000/2003 Thread, GPO - Only allow programs in C:\program files to run in Technical; I have a problem where students are running firefox and other browsers from there network drive and USB drive. Is ...
  1. #1

    Join Date
    Mar 2010
    Posts
    8
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    GPO - Only allow programs in C:\program files to run

    I have a problem where students are running firefox and other browsers from there network drive and USB drive. Is there a way to only allow programs in C:\program files to run.

  2. #2
    Galway's Avatar
    Join Date
    Jun 2007
    Location
    West Yorkshire
    Posts
    1,263
    Thank Post
    8
    Thanked 296 Times in 205 Posts
    Rep Power
    98
    Yup, setup a software restriction policy and apply it to your users.

  3. #3

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,335
    Thank Post
    367
    Thanked 619 Times in 506 Posts
    Rep Power
    155
    Yes, Software Restriction Policy.

  4. #4

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,210 Times in 761 Posts
    Rep Power
    394
    Bear in mind you will need to allow more locations than just Program Files. Just off the top of my head, Notepad, Calculator, and Paint are in the Windows system directory (not to mention all the system executables in various locations).

  5. #5
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    We use a software restriction whitelist for students it's a user GPO so it's quite easy to setup and test on an OU that won't affect all users to start with. Below is a few exclusions that you will need, I can post you our full list when I get change. This kills exes on USB dead

    %AllUsersProfile%\Desktop\ Path Unrestricted
    %AllUsersProfile%\Start Menu\ Path Unrestricted
    %AppData% Path Unrestricted
    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% Path Unrestricted
    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir% Path Unrestricted
    %SystemRoot%\System32\nvcplui.exe Path Disallowed
    %SystemRoot%\System32\runas.exe Path Disallowed
    %UserProfile%\Desktop\ Path Unrestricted
    %UserProfile%\Local Settings\Temp\ Path Disallowed
    %UserProfile%\Start Menu\ Path Unrestricted
    *.mdb Path Unrestricted

SHARE:
+ Post New Thread

Similar Threads

  1. Program keeps trying to run MSI installer
    By Skinny in forum Educational Software
    Replies: 1
    Last Post: 18th February 2010, 10:58 AM
  2. Run a program after a successfull wireless connection
    By rrichmond in forum Wireless Networks
    Replies: 1
    Last Post: 24th October 2008, 06:38 AM
  3. Need a script to run programs
    By timbo343 in forum Scripts
    Replies: 9
    Last Post: 26th September 2007, 12:24 PM
  4. What programs do you run on thin clients?
    By dezt in forum Thin Client and Virtual Machines
    Replies: 18
    Last Post: 17th June 2006, 05:01 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •