+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Block vbs cmd but allow login scripts etc in Technical; Hi How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers ...
  1. #1

    Join Date
    Feb 2008
    Posts
    333
    Thank Post
    52
    Thanked 3 Times in 3 Posts
    Rep Power
    14

    Block vbs cmd but allow login scripts etc

    Hi

    How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers etc?

    I was thinking software restrictions but have never done that before any guidance if possible

    Thanks in advance

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,988
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    107
    You would have software restrictions on user and shared areas etc. Use some kind of tool like USBDLM to make sure the USB drives are the same letters on all machines and apply the restrictions to them as well.

  3. #3

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,705
    Thank Post
    335
    Thanked 517 Times in 485 Posts
    Rep Power
    180
    Add an allow for
    Code:
    \\DOMAIN.internal\SysVol\DOMAIN.internal\Policies\*
    and a generic deny etc

    Steve

  4. #4

    Join Date
    Feb 2008
    Posts
    333
    Thank Post
    52
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    Thanks for the answers. Would it be possible just to block the file types not all software?

    Thanks again

  5. #5

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,705
    Thank Post
    335
    Thanked 517 Times in 485 Posts
    Rep Power
    180
    Code:
    \\mypath\*.vbs
    etc

    Steve

  6. #6

    Join Date
    Feb 2008
    Posts
    333
    Thank Post
    52
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    I am correct in thinking that you cant just disable one file type but you have to add all the software first then disallow the vbs cmd etc?

    I just want to put block vbs cmd bat is that possible?

    Thanks

  7. #7

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,839
    Thank Post
    148
    Thanked 577 Times in 521 Posts
    Rep Power
    155
    No, software restriction policies can disallow one file type, as long as you specify from where. We have this set for home areas, certain shares, Appdata and memory sticks. Also works to give some protection from malware.

  8. #8
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    491
    Thank Post
    44
    Thanked 74 Times in 69 Posts
    Rep Power
    21
    To give a better answer, no need for login scripts... GPO everything!

SHARE:
+ Post New Thread

Similar Threads

  1. Block youtube but allow specific channels?
    By pete in forum Internet Related/Filtering/Firewall
    Replies: 31
    Last Post: 8th November 2011, 04:54 PM
  2. IE Add-Ons - Want To Disable But Allow Flash / JS etc.
    By RichCowell in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 23rd June 2010, 10:43 AM
  3. Accesss Denied Error VBS Login Script
    By kiran in forum Windows Vista
    Replies: 4
    Last Post: 11th September 2008, 09:38 PM
  4. Vista + VB login script
    By dave.81 in forum Windows Vista
    Replies: 5
    Last Post: 17th February 2008, 04:29 PM
  5. Replies: 4
    Last Post: 23rd November 2006, 09:33 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •