+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 17 of 17
Windows Thread, Portable Apps! in Technical; What's wrong with the default exceptions when you choose the default policy as denied? I suspect what you have discovered ...
  1. #16
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,462
    Thank Post
    10
    Thanked 496 Times in 436 Posts
    Rep Power
    113
    What's wrong with the default exceptions when you choose the default policy as denied? I suspect what you have discovered that the .lnk shortcut files are still denied not the contents of program files itself.

    I'd delete the SRP and start again with the default as deny and add additional allows for the shortcuts. Mine look like this for students:

    %allusersprofile%\Start Menu\
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:46:27

    %appdata%
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:28:44

    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:27:02

    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir%
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:27:02

    %systemroot%\System32\runas.exe
    Security Level Disallowed
    Description
    Date last modified 17/03/2009 16:33:49

    %userprofile%\Local Settings\Temp\
    Security Level Unrestricted
    Description
    Date last modified 18/03/2009 09:25:00

    %userprofile%\Start Menu\
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:46:38

    *.mdb
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:30:47

    \\domain.name
    Security Level Unrestricted
    Description
    Date last modified 17/03/2009 16:31:07


    Allowing the domain is useful for the logon scripts, also remember to add and unc paths to application servers \\servername or \\servername\share will suffice, no need for lots of *\*\ etc.

  2. Thanks to DMcCoy from:

    Zoom7000 (29th June 2009)

  3. #17
    Zoom7000's Avatar
    Join Date
    Feb 2006
    Location
    London
    Posts
    955
    Thank Post
    308
    Thanked 86 Times in 57 Posts
    Rep Power
    33
    Quote Originally Posted by DMcCoy View Post
    Allowing the domain is useful for the logon scripts, also remember to add and unc paths to application servers \\servername or \\servername\share will suffice, no need for lots of *\*\ etc.
    Thanks mate. I just created a Test OU and it worked. I'll try it out on the main students!

    One thing I added to the above was "%AllUsersProfile%\Desktop\" so that they can run shortcuts from All Users Desktop.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. PORTABLE STORAGE WITHOUT PC
    By david12345 in forum Hardware
    Replies: 8
    Last Post: 12th November 2007, 10:18 PM
  2. Replies: 25
    Last Post: 22nd October 2007, 09:07 AM
  3. Portable Apps
    By Heebeejeebee in forum Downloads
    Replies: 1
    Last Post: 25th November 2006, 10:06 PM
  4. Portable Apps
    By pcprofessor in forum General Chat
    Replies: 5
    Last Post: 19th March 2006, 11:06 PM
  5. Portable wireless laptops and trolleys
    By alexknight in forum Hardware
    Replies: 14
    Last Post: 17th November 2005, 03:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •