+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Block vbs cmd but allow login scripts etc in Technical; Hi How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers ...
  1. #1

    Join Date
    Feb 2008
    Posts
    324
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14

    Block vbs cmd but allow login scripts etc

    Hi

    How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers etc?

    I was thinking software restrictions but have never done that before any guidance if possible

    Thanks in advance

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106
    You would have software restrictions on user and shared areas etc. Use some kind of tool like USBDLM to make sure the USB drives are the same letters on all machines and apply the restrictions to them as well.

  3. #3

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Add an allow for
    Code:
    \\DOMAIN.internal\SysVol\DOMAIN.internal\Policies\*
    and a generic deny etc

    Steve

  4. #4

    Join Date
    Feb 2008
    Posts
    324
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    Thanks for the answers. Would it be possible just to block the file types not all software?

    Thanks again

  5. #5

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Code:
    \\mypath\*.vbs
    etc

    Steve

  6. #6

    Join Date
    Feb 2008
    Posts
    324
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    I am correct in thinking that you cant just disable one file type but you have to add all the software first then disallow the vbs cmd etc?

    I just want to put block vbs cmd bat is that possible?

    Thanks

  7. #7

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,711
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    No, software restriction policies can disallow one file type, as long as you specify from where. We have this set for home areas, certain shares, Appdata and memory sticks. Also works to give some protection from malware.

  8. #8
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    420
    Thank Post
    43
    Thanked 66 Times in 61 Posts
    Rep Power
    18
    To give a better answer, no need for login scripts... GPO everything!

SHARE:
+ Post New Thread

Similar Threads

  1. Block youtube but allow specific channels?
    By pete in forum Internet Related/Filtering/Firewall
    Replies: 31
    Last Post: 8th November 2011, 04:54 PM
  2. IE Add-Ons - Want To Disable But Allow Flash / JS etc.
    By RichCowell in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 23rd June 2010, 10:43 AM
  3. Accesss Denied Error VBS Login Script
    By kiran in forum Windows Vista
    Replies: 4
    Last Post: 11th September 2008, 09:38 PM
  4. Vista + VB login script
    By dave.81 in forum Windows Vista
    Replies: 5
    Last Post: 17th February 2008, 04:29 PM
  5. Replies: 4
    Last Post: 23rd November 2006, 09:33 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •