+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Strange thing with GPO settings not taking affect. in Technical; I was watching a couple of kids today through VNC and i noticed that they were downloading Google earth and ...
  1. #1
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Strange thing with GPO settings not taking affect.

    I was watching a couple of kids today through VNC and i noticed that they were downloading Google earth and installing it themselves.?????????

    I would not have believed it if i had not seen it myself. In the GPO they cannot see the C: drive nnd have not access to it butt hey had no problem installing Google Earth. I have checked all the GPO settings and they are all as i thought. We run ISA 2000 and that stopped most forms of downloading possible or so i thought........! I know ISA is working ok because staff complain they cannot download certain things when they are on the network.

    Surely there is nothing special with Google Earth.

  2. #2
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Strange thing with GPO settings not taking affect.

    I've cracked the no download thing - now i'm being forced to remove it because kids can't download pdf's etc.

    IE is a major pain - the download cache is independant and can be instaled from - that would be my first port of call.

  3. #3
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Strange thing with GPO settings not taking affect.

    How did you crack it?

  4. #4

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,441
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    Re: Strange thing with GPO settings not taking affect.

    Simple. You enable the GPO which prevents users from installing software.

    %GPO%\Local computer policy\administrative templates\windows installer\prohibit user installs.

    You can also prevent users from downloading .exe files by GPO but I can't find it at the moment.

  5. #5
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Strange thing with GPO settings not taking affect.

    there are a couple of GP settings to prevent downloads, as well as denying installs.

    Also in that group Dos_Box: disable windows installer

    plus:

    User Policy\administrative templates\windows components\Internet Explorer\security settings\restrict file downloads

    [there's a matching policy on the local computer policy side]

  6. #6

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,441
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    Re: Strange thing with GPO settings not taking affect.

    If you restrict Windows installer then programs like Office cannot do user configs.

  7. #7
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Strange thing with GPO settings not taking affect.

    @dos__Box
    %GPO%\Local computer policy\administrative templates\windows installer\prohibit user installs.
    I take it this setting does not affect .msi install througth GPO?

    You can also prevent users from downloading .exe files by GPO but I can't find it at the moment.
    I've looked as well and i can't find it either. Let me know if you do.

    @mark
    User Policy\administrative templates\windows components\Internet Explorer\security settings\restrict file downloads
    I've just had a look at this. Is it not just dissableing the prompt box or does it actually stop any type of download?

  8. #8

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,889 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614

    Re: Strange thing with GPO settings not taking affect.

    You could always try blocking certain applications running via GPO. By default put in *.msi, winmine.exe, sol.exe, setup.exe and so on ... this really annoys the kids because they can see the games there ... but can't play them. And it also helps to try and stop them when they are trying to install apps too.

    Evil? Me? Why thank you kind sirs ;-)

  9. #9
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Strange thing with GPO settings not taking affect.

    Quote Originally Posted by tosca925
    @mark
    User Policy\administrative templates\windows components\Internet Explorer\security settings\restrict file downloads
    I've just had a look at this. Is it not just dissableing the prompt box or does it actually stop any type of download?
    If you look in the settings of that policy, you have 2 options: prevent user initiated and prevent non initiated.

  10. #10

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,447
    Thank Post
    1,537
    Thanked 1,069 Times in 934 Posts
    Rep Power
    305

    Re: Strange thing with GPO settings not taking affect.

    We are having the same problem, especially with google earth as we do not want the school using it due to its data harvesting properties. Our MIS systems is Facility CMIS and we use the eportal for everything now, its as rare as hens teeth to find the full program on any machine, but we dont want Google reading or doing anything with any temps or files left behind with the eportal. Kids are downloading it willy nilly and as a result its installing on there roaming profiles so its slowing down logons grrrr. We have checked the GPO's mentioned and still they can do it, but yet there are other sites out there that have similar install setups and they cannot do it with them! Have Google got some special "bypass GPO's to make sure everyone can and does use our product" skills? Its annoying and going to cause us problems soon......

  11. #11

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,441
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    Re: Strange thing with GPO settings not taking affect.

    Roaming profiles are evil. Bin them.

  12. #12
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    30

    Re: Strange thing with GPO settings not taking affect.

    As a mod, should i remove roaming profile bashing (after seeing it on many threads)?? :P :P

    Regarding the preventing download in IE GP setting, i forget what it is, but it stops you clicking save on the requester - well, you can click it but you then get a message saying "not allows blah blah - or whatever it is lol"

    I'll try to remembr to dig it out tomorrow

    They, of course, can click Open but for some reason - i must have got the right settings down or something, I havent noticed any games appearing anywhere

    With pdf's etc, just click open mark lmao :P

    Regards
    Nath



SHARE:
+ Post New Thread

Similar Threads

  1. The Real Thing
    By rrichmond in forum General Chat
    Replies: 24
    Last Post: 18th December 2007, 01:13 AM
  2. login for one thing
    By alonebfg in forum Windows
    Replies: 6
    Last Post: 6th December 2006, 02:41 AM
  3. Wow! What can't this thing do...
    By ajbritton in forum Links
    Replies: 3
    Last Post: 12th October 2006, 04:46 PM
  4. I just did a very silly thing...
    By indiegirl in forum Windows
    Replies: 6
    Last Post: 28th February 2006, 11:02 AM
  5. Is there such a thing as?
    By e_g_r in forum Educational Software
    Replies: 13
    Last Post: 10th January 2006, 10:20 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •