+ Post New Thread
Results 1 to 5 of 5
Windows Thread, Software Restriction Policy Issues in Technical; I知 currently stumped, we are running a windows 2003 environment and I知 currently trying to get game maker 7 working ...
  1. #1

    Join Date
    Dec 2007
    Location
    Nottinghamshire
    Posts
    187
    Thank Post
    59
    Thanked 21 Times in 19 Posts
    Rep Power
    17

    Software Restriction Policy Issues

    I知 currently stumped, we are running a windows 2003 environment and I知 currently trying to get game maker 7 working again.

    We added a new software restriction policy to stop out students running files straight out of zips where we used %temp% and blocked the normal file types including exe files.

    When you try and run your game game maker creates a exe file in %temp%\gm_ttt_(5 numbers)\filename.exe

    So I知 trying to create a path rule that will allow the exe to run.

    I have tried the following (one at a time);

    %temp%\gm
    %temp%\gm_ttt
    %temp%\gm*
    %temp%\gm*\*
    %temp%\gm_ttt*
    %temp%\gm_ttt_?????*
    %temp%\gm_ttt_?????\
    %temp%\gm_ttt_?????\*
    %temp%\gm_ttt_?????\*.exe

    I have been using the same policy that blocks the %temp% folder and removing the policy allows the program to work without any problem.

    The policy is being applyed, when looking in RSOP and it is still blocking the running of files from zips.

    Can anyone see what I知 doing wrong? Or suggest a better way of stopping students running files straight out of a zip without extracting them.
    Attached Images Attached Images

  2. #2

    Join Date
    Sep 2007
    Posts
    90
    Thank Post
    7
    Thanked 32 Times in 17 Posts
    Rep Power
    19
    Disable explorer's built-in ZIP support.
    Then install Uniextract ( Universal Extractor | LegRoom.net ) which only lets you extract files
    from the context-menu, not open them.
    Also, it support almost any compression format, not just ZIP.

  3. Thanks to rvdmast from:

    notalot (26th April 2010)

  4. #3

    Join Date
    Dec 2007
    Location
    Nottinghamshire
    Posts
    187
    Thank Post
    59
    Thanked 21 Times in 19 Posts
    Rep Power
    17
    thanks Rvdmast, any other thoughts?

  5. #4

    Join Date
    Dec 2007
    Location
    Nottinghamshire
    Posts
    187
    Thank Post
    59
    Thanked 21 Times in 19 Posts
    Rep Power
    17
    Cracked it, not sure why it doesnt like the %temp% we tryed, but if we used C:\Documents and Settings\%username%\Local Settings\Temp\gm_ttt_????? then it worked.

    we also have added 2 more rules just in case there is a old profile in there

    c:\documents and settings\%username%.(Domain)\local settings\temp\gm_ttt_*
    c:\documents and settings\%username%.(Domain).???\local settings\temp\gm_ttt_*
    Last edited by notalot; 26th April 2010 at 11:34 AM.

  6. Thanks to notalot from:

    darrenstraight (18th May 2010)

  7. #5
    darrenstraight's Avatar
    Join Date
    Feb 2009
    Posts
    36
    Thank Post
    2
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Thanks this solved the same problem I have which I was about to post after having no luck in the RM CC4 Communites Forum.

    I allowed the following path:
    %UserProfile%\Local Settings\Temp\gm_ttt_?????\*

    My Problem incase anyone else on the internet searches for this problem too:
    This is a long shot here. We are having an issue at the moment on Windows XP where if we alow .exe files to be run for example at "C:\Documents and Settings\test.pupil\Local Settings\Temp\" with allow path rule "UserProfile%\Local Settings\Temp\*" for GameMaker testing/debuuging. Then users can open up .zip files on the internet (instead of using save button) and execute/install .exe contained within this folder.

    Process gamemaker does when testing/debuging a game:

    1. User loads up gamemaker and creates a room etc.
    2. User then presses the green/red triangle to either test/debug the game.
    3. Gamemaker stores the test .exe file in a folder such as C:\Documents and Settings\test.pupil\Local Settings\Temp\gm_ttt_43426\game.exe
    4. User plays and closes game
    5. Gamemaker now deletes tempory file/folder.


    Process you can use to open up and install executables:

    1. User goes to YoYo Games
    2. User says open instead of save when promted what to do.
    3. User will now have a windows open such as C:\Documents and Settings\test.pupil\Local Settings\Temporary Internet Files\Content.IE5\J07C26NW\gmaker80[1].zip
    4. User opens up gmaker80.exe
    5. The .exe file will copy it's self for example to C:\Documents and Settings\test.pupil\Local Settings\Temp\Temporary Directory 1 for gmaker80[1].zip
    6. The Gamemaker installer will now launch and can be installed.

    As you can see if I allow gamemaker to run .exe in the temp folder it also alows .exe to be opened up from a zip folder on the internet.

    The only solution I have found is that each time a user wants to test their game that it's stored in the "N:\Game Maker" foldder where .exe are allowed to be run (only game maker class know of this location), however this means you have to create the .exe file each time you want to test the game and you will not be able to use the green/red traingle to test/debug the game.

    You cant have an allow path for "C:\Documents and Settings\test.pupil\Local Settings\Temp\C:\Documents and Settings\test.pupil\Local Settings\Temp\gm_ttt_43426\game.exe" becuase game maker creates a diffrent directory name each time for example gm_ttt_13427 gm_ttt_63426 etc..

    Any solutions would be of great help. I'm just wondering how long it will be until users start oepning up other .zip file on the internet an install the .exe files inside them. I wish there was a way I didnt have to allow the %UserProfile%\Local Settings\Temp path (Files run from compressed folders are unzipped to this directory and run from here - potentially circumventing Software Restrictions.) to allow gamemaker to test/debug games. Doesnt seem to be any regedit path to change where gamemaker puts the temp game.exe.

    The only other thing I could think of is changing the environment variables %TEMP% and %TMP% for the users who do need gamemaker and allowing that path but that doesnt really solve the problem either.

SHARE:
+ Post New Thread

Similar Threads

  1. Software Restriction Policy Whitelist
    By cookie_monster in forum Windows
    Replies: 5
    Last Post: 10th July 2009, 12:50 PM
  2. Software Restriction policy
    By mcloum in forum Windows Server 2000/2003
    Replies: 7
    Last Post: 22nd March 2009, 11:36 AM
  3. Software Restriction Policy
    By cookie_monster in forum Windows
    Replies: 2
    Last Post: 27th November 2007, 12:54 PM
  4. CC3 Software Restriction Policy
    By cookie_monster in forum Network and Classroom Management
    Replies: 8
    Last Post: 12th June 2007, 10:28 AM
  5. GPo - Software Restriction Policy
    By Gatt in forum Wireless Networks
    Replies: 26
    Last Post: 23rd January 2006, 01:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •