+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Blocking .EXE files for Students on USB Drives in Technical; Does anyone have a suggestion for .exe files on a windows 2003 domain. The kids are bringing in proxy anonymizers ...
  1. #1

    Join Date
    Jan 2009
    Location
    Leicester
    Posts
    45
    Thank Post
    17
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Blocking .EXE files for Students on USB Drives

    Does anyone have a suggestion for .exe files on a windows 2003 domain. The kids are bringing in proxy anonymizers on them and i'm finding it hard to keep up with new ones! Our usb drives can map to random drive letters so it their a way of just blocking ALL exe files unless its from drives I specify for students!

    Thanks All!

  2. #2

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,898
    Thank Post
    1,182
    Thanked 1,053 Times in 748 Posts
    Rep Power
    327
    @stevieo2000:

    Already been a thread on this check out:
    Preventing File Extensions through GPO

    Check out User3204 post.

  3. Thanks to bossman from:

    steveo2000 (18th December 2009)

  4. #3

    Join Date
    Nov 2009
    Posts
    79
    Thank Post
    3
    Thanked 4 Times in 4 Posts
    Rep Power
    10
    Some AV do it too, We use sophos and it supports USB blocking of extensions. But what's stopping the students putting the .exe into there area and running it from there?

  5. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,695
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    File Server Resource Manager can stop that^^

  6. #5

    Join Date
    Nov 2009
    Posts
    79
    Thank Post
    3
    Thanked 4 Times in 4 Posts
    Rep Power
    10
    Quote Originally Posted by 3s-gtech View Post
    File Server Resource Manager can stop that^^
    thats only if you have r2 isnt it

  7. #6

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,695
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    Or 2008, yeah. Worth the upgrade!

  8. #7
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    best way, which im gonna setup soon, is to enable the allowed program list, which means anything on this list, they will not be able to run it

    So you will need to make a list of all the allowed programes on that, and it will stop them, installing & running programes you dont want them to use

  9. #8
    chrisredfield93's Avatar
    Join Date
    Feb 2009
    Location
    Wales
    Posts
    232
    Thank Post
    89
    Thanked 4 Times in 4 Posts
    Rep Power
    15
    Quote Originally Posted by davep000 View Post
    best way, which im gonna setup soon, is to enable the allowed program list, which means anything on this list, they will not be able to run it

    So you will need to make a list of all the allowed programes on that, and it will stop them, installing & running programes you dont want them to use
    This be intresting keep us updated and how are you planning on doing this client and server based? like abtutor, is this be going by process name or titlebar? etc

  10. #9

    Join Date
    Nov 2009
    Posts
    79
    Thank Post
    3
    Thanked 4 Times in 4 Posts
    Rep Power
    10
    Quote Originally Posted by chrisredfield93 View Post
    This be intresting keep us updated and how are you planning on doing this client and server based? like abtutor, is this be going by process name or titlebar? etc
    Its done via GPO, you'd set it on the OU with all the computers that the students use and then its done on process name. If the students are clever they can renamed there .exe on the memory stick to reflect an ok program and that will let it run though.

  11. #10
    joe90bass's Avatar
    Join Date
    Oct 2007
    Location
    S Wales
    Posts
    1,349
    Thank Post
    322
    Thanked 107 Times in 96 Posts
    Rep Power
    50
    Quote Originally Posted by davep000 View Post
    best way, which im gonna setup soon, is to enable the allowed program list, which means anything on this list, they will not be able to run it

    So you will need to make a list of all the allowed programes on that, and it will stop them, installing & running programes you dont want them to use
    Good luck! I tried it a few years back, it takes a lot of setting up! There's normally more than one exe per program and they're not always in the same folder as the main program.... I ran with it for a while, but can't remember why I took it off.... Probably never got it right!

  12. #11
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Dont think it will take that long to setup

    We havent got that many programes on the network anymore

    Been doing some maintance, got rid of all the software that dont get used any more, we havent havent got that much anymore gladly

    Question if I enable this, will I also have to put on the allowed list stuff like .doc, docx, swf, etc so they can run those questions?

    Or can I get away with swf? Will it be able to lanch throught internet explorer only and not from there memory sticks?

    Lol god know why im on this forum doing work stuff, hense im on my christmas holdiays now, bored already

  13. #12
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Quote Originally Posted by Danlewis3 View Post
    Its done via GPO, you'd set it on the OU with all the computers that the students use and then its done on process name. If the students are clever they can renamed there .exe on the memory stick to reflect an ok program and that will let it run though.

    Not nessery, you can put in the file path cant you (Cant rembrer without looking)

    So that will stop that

    If not I doubt the students will know about renameing their exe to an allowed exe name (If they even know an allowed exe name)

  14. #13

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    18
    I did this with Software Restriction policies some time ago and its worked really well.

    Plan ahead and make sure you've got a good like of your networked applications.

    I made ours a whitelist unblocked C:\program files and c:\windows etc which meant most legitimate applications installed by us were ok.

    Watch out for SYSVOL and NETLOGON shares, as these will need to be allowed as well to run login scripts etc.

    Some apps are a pain as they create a file in the users application data folder and try and run it from there - once you know the app name though you can unblock it for any path.

SHARE:
+ Post New Thread

Similar Threads

  1. Blocking usb devices for students
    By Neville in forum Windows
    Replies: 1
    Last Post: 13th February 2009, 12:14 PM
  2. Replies: 14
    Last Post: 11th March 2008, 01:54 PM
  3. Blocking .exe from USB drives
    By mmoseley in forum Network and Classroom Management
    Replies: 2
    Last Post: 18th July 2007, 08:35 PM
  4. Cannot remove students exe files
    By Andi in forum Windows
    Replies: 16
    Last Post: 2nd April 2007, 08:15 PM
  5. exe files on usb sticks
    By goodhead in forum Hardware
    Replies: 4
    Last Post: 15th February 2007, 05:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •