+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Software restriction policies on USB sticks in Technical; I have not posted for a while because of personal reasons but have been reading the forums when i got ...
  1. #1
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    972
    Thank Post
    91
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Software restriction policies on USB sticks

    I have not posted for a while because of personal reasons but have been reading the forums when i got chance.

    I have followed a few posts on setting up software restriction policies on users USB sticks. I have set it using USBAdmin that all USB sticks use the letter U:. I want to block all exe from running from this drive letter. My confusions is how o stop all exe from the drive. I know in the policy i can set it to block U:\*.exe but do i need to repeat this so it covers a lotof sub folder options ie; U:\*\*.exe and U:\*\*\*.exe and so on or is there a way of doing it only once so it blocks all exe no matter what level of folder the exe is in.

    ( i have just read my own question and not even sure if i have answered myself with my examples) Could someone help please?

  2. #2

    Join Date
    Feb 2007
    Posts
    34
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16

    Re: Software restriction policies on USB sticks

    I recently did this, and yes you need to specify for each level

    U:\*.exe
    U:\*\*.exe
    U:\*\*\*.exe

    etc., for as many sub folders as you wish, I only went 5 sub folders deep, I figured most kids would give up after that. This was the only way I know of.

  3. Thanks to Gambit from:

    philtomo-25 (24th February 2009)

  4. #3
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Software restriction policies on USB sticks

    I think it's better to put a blanket block on executable and then create exceptions for the areas that users are allowed to launch EXEs from.

  5. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Software restriction policies on USB sticks

    Hmm there must be an easier way with the first examples . That does seem rather rubbish if you ask me.

  6. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Software restriction policies on USB sticks

    With my security hat on, ajbrittons default deny method is a better solution. Although it'll be slightly more annoying to implement.

  7. #6
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Software restriction policies on USB sticks

    I wonder if that trust no exe program would be a bit more flexible ?

  8. #7
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,958
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Software restriction policies on USB sticks

    Had all sorts of problems with trust-no-exe - my machines just cycled in the end there were so many errors.

  9. #8
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Software restriction policies on USB sticks

    Ah well scrap that!

  10. #9

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,507
    Thank Post
    1,492
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302

    Re: Software restriction policies on USB sticks

    My solution is switch to Vista, it has built in removable device filtering etc so you can stop certin things being run and used etc, may not be everything you need but worth looking into with other solutions

  11. #10


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339

    Re: Software restriction policies on USB sticks

    @John - wheres the software restriction policy to prevent exe's? AFAIK vista only blocks devices or sets read/write permissions on selected devices. blocking devices can be done with adm on 2k/xp

  12. #11

    Join Date
    Nov 2006
    Location
    Milan, Italy
    Posts
    38
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    16

    Re: Software restriction policies on USB sticks

    I had the same problem at work. After looking (and trying) several methods I've found the best is to white list method mentioned.

    All exe are blocked by default. I made sure to add all the recommended paths from MS and it seems to have worked as advertised. Just make sure you test out the policy first!

  13. #12

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,507
    Thank Post
    1,492
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302

    Re: Software restriction policies on USB sticks

    Quote Originally Posted by CyberNerd
    @John - wheres the software restriction policy to prevent exe's? AFAIK vista only blocks devices or sets read/write permissions on selected devices. blocking devices can be done with adm on 2k/xp
    I did put that it probably won't do everything you need to, and it won't but it can be useful and I suspect they will build upon it.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 172
    Last Post: 13th June 2013, 01:02 PM
  2. Software Restriction Policies - Allow ONLY certain software
    By link470 in forum Wireless Networks
    Replies: 28
    Last Post: 9th July 2010, 04:29 PM
  3. Help write a guide for Software restriction policies for USB
    By ChrisH in forum How do you do....it?
    Replies: 7
    Last Post: 28th January 2010, 09:40 AM
  4. Software Restriction Policies
    By wesleyw in forum Windows
    Replies: 14
    Last Post: 12th December 2006, 11:35 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •