Software Restriction Policy

[cookie_monster]

We have been using software restriction to prevent students running exe's from their work areas and for a few other applications, we run it set to unrestricted by default and then ban what we need to.

Does anyone here run a disallowed default policy? If so what issues have you encountered?

Cheers.

[kennysarmy]

we only allow exe's to run from the C:\ and the network shares where WE have installed applications.

Never had any problems.

[cookie_monster]

Ok so you allow exes to be run from anywhere on the C: drive? We ban them from being run in their userprofile temp folder but that's about all as they can't save to any other location.