+ Post New Thread
Results 1 to 6 of 6
Windows Thread, Blocking .exe in Technical; Could someone point me in the direction of blocking .exe files running on our network. We are running Server 2003 ...
  1. #1

    Join Date
    Jun 2005
    Posts
    12
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Blocking .exe

    Could someone point me in the direction of blocking .exe files running on our network.

    We are running Server 2003 and XP clients.
    There are two places that .exe's are aloud to be run
    - C drive (kids can not add there files there so it will just be the preinstalled software)
    - shared drives on the server. ( //server/software.exe where there is a shortcut in the startmenu pointing to this)

    I would like to block .exe running from there mapped drives and any other disks such as USB Floppy and CD Rom

    Any advice on where to start looking would be great

    Thanks
    Lee

  2. #2

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Blocking .exe

    There are number of ways of doing this. If you are just using vanilla AD then you can use admin templates in the user section of a GPO to run only a permitted "whitelist" of applications.

    Also in the computer sectrion of a GPO you can use path rules in Software Restriction Policies to block certain applications or wildcards for network drives or UNCs.

  3. #3

    Join Date
    Jun 2005
    Posts
    12
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Blocking .exe

    i keep seeing the term "Vanilla" could you explain what this is

    Thanks
    Lee

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,009
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Blocking .exe

    It just means ordinary. In this context not RM or some other other sytem built on top of normal MS server software.

  5. #5
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,314
    Thank Post
    54
    Thanked 292 Times in 228 Posts
    Blog Entries
    6
    Rep Power
    116

    Re: Blocking .exe

    The easiest way would be to set up a software restriction policy in your group policy as NetworkGeezer suggests. You can quite easily set it up so it only allows executables to be run in (say) the Windows directory, Program Files directory and a folder on a server which is pretty much what we've done.

    Downside is, Software Restriction Policies in this context only work with XP Clients. If you want to do this on 2000 its a tad more complicated.

    More information here: http://www.microsoft.com/technet/pro.../rstrplcy.mspx

  6. #6

    Join Date
    Jun 2005
    Posts
    12
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Blocking .exe

    That looks an interesting article I’ll take a read

    Thanks for the replies

SHARE:
+ Post New Thread

Similar Threads

  1. Blocking Command.com
    By Jamie_a in forum Windows
    Replies: 12
    Last Post: 11th October 2007, 09:31 AM
  2. Blocking .exe from USB drives
    By mmoseley in forum Network and Classroom Management
    Replies: 2
    Last Post: 18th July 2007, 08:35 PM
  3. One for the blocking list
    By PageZ in forum General Chat
    Replies: 3
    Last Post: 8th March 2007, 08:10 PM
  4. AOL Blocking E-Mails...
    By AshF in forum General Chat
    Replies: 3
    Last Post: 22nd January 2007, 11:07 AM
  5. IE + blocking downloads through GPO
    By Kyle in forum Windows
    Replies: 1
    Last Post: 15th November 2006, 09:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •