+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Block vbs cmd but allow login scripts etc in Technical; Hi How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers ...
  1. #1

    Join Date
    Feb 2008
    Posts
    325
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14

    Block vbs cmd but allow login scripts etc

    Hi

    How are you blocking .vbs .cmd .bat files but still allowing login scripts to run and scripts for printers etc?

    I was thinking software restrictions but have never done that before any guidance if possible

    Thanks in advance

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108
    You would have software restrictions on user and shared areas etc. Use some kind of tool like USBDLM to make sure the USB drives are the same letters on all machines and apply the restrictions to them as well.

  3. #3

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,694
    Thank Post
    335
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Add an allow for
    Code:
    \\DOMAIN.internal\SysVol\DOMAIN.internal\Policies\*
    and a generic deny etc

    Steve

  4. #4

    Join Date
    Feb 2008
    Posts
    325
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    Thanks for the answers. Would it be possible just to block the file types not all software?

    Thanks again

  5. #5

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,694
    Thank Post
    335
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Code:
    \\mypath\*.vbs
    etc

    Steve

  6. #6

    Join Date
    Feb 2008
    Posts
    325
    Thank Post
    51
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    I am correct in thinking that you cant just disable one file type but you have to add all the software first then disallow the vbs cmd etc?

    I just want to put block vbs cmd bat is that possible?

    Thanks

  7. #7

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,758
    Thank Post
    145
    Thanked 558 Times in 502 Posts
    Rep Power
    152
    No, software restriction policies can disallow one file type, as long as you specify from where. We have this set for home areas, certain shares, Appdata and memory sticks. Also works to give some protection from malware.

  8. #8
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    464
    Thank Post
    44
    Thanked 73 Times in 68 Posts
    Rep Power
    19
    To give a better answer, no need for login scripts... GPO everything!

SHARE:
+ Post New Thread

Similar Threads

  1. Block youtube but allow specific channels?
    By pete in forum Internet Related/Filtering/Firewall
    Replies: 31
    Last Post: 8th November 2011, 04:54 PM
  2. IE Add-Ons - Want To Disable But Allow Flash / JS etc.
    By RichCowell in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 23rd June 2010, 10:43 AM
  3. Accesss Denied Error VBS Login Script
    By kiran in forum Windows Vista
    Replies: 4
    Last Post: 11th September 2008, 09:38 PM
  4. Vista + VB login script
    By dave.81 in forum Windows Vista
    Replies: 5
    Last Post: 17th February 2008, 04:29 PM
  5. Replies: 4
    Last Post: 23rd November 2006, 09:33 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •