Student Documents

[Shocker]

Hi guys

Hoping someone can help me here I have found that allot of our kids have started running applications directly from there my documents folders. I think I know why this is on each my documents the user has full control of the folder but cannot access anyone else’s folder.

The rights we have on each folder are:

Administrator - Full Control
System - full Control
(Pupil) - Full Control

With this it is allowing the kids to put full applications on their documents and run the exe's the problem i have is that this is the same on every folder for every pupil.

Should I change the Pupil control so that they don’t have read/execute and if so how could i bulk change this to 780 folders.

Any help would be much appreciated

[Shocker]

I have just added a software restriction policy and set the level to Basic, then under enforcement added to all users except local admin to see if this will stop our pupils from being able to run .exe from there documents folders

[Jamo]

A software restriction policy applied to the students group is the correct way to go here. You can restrict for all kinds of file types etc, rather handy!

Be wary of restricting too much though!! They still need to run apps from program files / windows dir / any public drives etc.

[Shocker]

thank you i have been reading on other threds about stopping the games from being run on USB drives some talk about disknet pro so i think i might looking into an education license for this as well would be very handy to stop them from being run from memory sticks the bigest problem is the .swf games which are harder to stop espically if they are using IE to run the application