+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 32
Windows Thread, Blocking ALL Executables in Students Home Directory in Technical; Hi! I am trying to block all EXE files in students home directories, using Group Policy Software Restriction Policies, but ...
  1. #1

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Blocking ALL Executables in Students Home Directory

    Hi!

    I am trying to block all EXE files in students home directories, using Group Policy Software Restriction Policies, but am struggling at the moment!

    It is not dependant on a specific application, I just want blanket coverage for all EXE's. It would ideal to block exe's from Pen drives as well. I have looked at USBDLM, but have come up against the software restriction policy again!

    HELP!! Please...

    Mark

  2. #2
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62

    Re: Blocking ALL Executables in Students Home Directory

    You cannot do a blanket block of EXE's using GPO you need to be specific.

    If you are windoes windows 2003 server R2 it has file restrictions builtin if not you will need to use free tools that you can either sweep the home dirs in a re-active manner or buy some software to control the home dirs in a pro-active manner.

  3. #3
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,987
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    107

    Re: Blocking ALL Executables in Students Home Directory

    I am using R2s file screening for Home directories and software restriction policies for USB drives. I have found that you can only define scripts and programs though using SRP and not ban stuff like MP3s etc which would have been nice.

  4. #4

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    How did you do the software restriction policies for the USB drives?

    This is the nut I currently cannot crack!

    Ta
    Mark

  5. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Blocking ALL Executables in Students Home Directory

    If you've converted any of your fileservers over to *nix/samba you can use the 'veto files' and 'delete veto files' share level configuration options to block file types based on extension.

  6. #6

    Join Date
    Jan 2007
    Location
    oop north
    Posts
    131
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Blocking ALL Executables in Students Home Directory

    Use USBDLM to always map USB drives to the same drive letter(s). Then apply the appropriate software restriction policy to that mapping.

    What do you mean when you say that you have come up against 'the software restriction policy'?

  7. #7

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    I understand the software restriction policies upto a point.
    I have managed to block specific programs (such as media player and windows games) using Path Rules. How, and what type of rule have you used for your USB drives. I thought it would work the same for users home directories, but so far no luck. All our students use H: for their home directories.

    I tried H:\*.exe and H:\..\*.exe but to no avail!!!

    Thanks
    Mark

  8. #8
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    You cannot do a blanket block of EXE's using GPO you need to be specific.
    Dont be silly.

    See my attachment.

    You can set different drives as permanantly disallowed.

    fooby
    Attached Images Attached Images

  9. #9

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    I still want to allow USB drives, but to block EXE files on them!! Not block them completely!!!!!

    I don't think anyone actually understands what I am on about so far!!

    Mark

  10. #10
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,464
    Thank Post
    10
    Thanked 496 Times in 436 Posts
    Rep Power
    113

    Re: Blocking ALL Executables in Students Home Directory

    You can switch SRP security level to disable everything, allow specified rather than allow everything disable specified. Needs testing to catch and identify things that should be allowed like login scripts etc.

  11. #11
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    markwilliamson2001

    The settings I have displayed to 100% exactly that. It is what is set here in my college. USB drives and SD XD etc cards read, however no one can execute anything from them.

    fooby

  12. #12

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    fooby

    Does this mean that you can use the pen drive in a normal way, to transfer work (word docs etc etc) and copy to and from the Pen Drive?

    Ta
    Mark

  13. #13
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    Yes indeedy.

    Software Restriction Policies blocks executing of executables, not any sort of file accessing. We have this set up here, so students can open any of their work files from usb ipod etc but not run any flash games and stuff like that.


    If you need more help, it took me ages so i can help with this more.

    fooby

  14. #14

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    It doesnt seem to block executables on home directories for students areas (which are mapped to H

    I am going to try %HOMEDRIVE% next to see if it works...

    Mark

  15. #15
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    Sometimes the SRP takes more than one logoff / logon to apply. Try restarting the PC and logon as a student. If not, logoff, logon as admin, start run, gpupdate /force, reboot, logon as student and test, or reboot again and test.

    group policies can take a while to make sure they are applied.

    also check the event logs often for errors reported, such as SRP could not apply etc.

    fooby

    p.s blocked exe's are also recorded in the event log so u can see if it works.

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Students are installing IM apps to their home folder
    By bwallman in forum How do you do....it?
    Replies: 30
    Last Post: 20th December 2007, 05:31 PM
  2. natively remove home directory in ADUC
    By mac_shinobi in forum Windows
    Replies: 2
    Last Post: 7th November 2007, 04:47 PM
  3. Home directory not mapping
    By Oops_my_bad in forum Windows
    Replies: 9
    Last Post: 25th October 2007, 04:34 PM
  4. Home Directory Creation - how ??
    By pooley in forum How do you do....it?
    Replies: 4
    Last Post: 26th April 2007, 12:49 PM
  5. K9 free parental internet blocking software for home use
    By beeswax in forum Comments and Suggestions
    Replies: 1
    Last Post: 29th June 2006, 08:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •