Software Restriction policy
I have been messing with software restriction policies on a virtual network and so far i like what i see, could come in very handy :D
But i have found a few niggles that i cant get my head around. The default policy allows all EXEs to run from %systemroot%\System32 which is where mspaint.exe is stored (for example) now the default setting i have choose is block all except DLLs. If i run Paint from the stat menu its blocked, but if i run it from the system32 folder itself it is allowed to run. Any ideas why?
This isnt such a major problem as kids dont have access to these folders anyway but i want to understand why its allowing it.
Solution: Uncheck .lnk files
I know this thread is a little old, but just for anybody else who is experiencing this problem; this is what worked for me:
Remove the ".lnk" file type from the list of filtered extensions. I have found a screenshot that shows where this can be done. Please find it attached. :)