+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 27 of 27
Wireless Networks Thread, GPo - Software Restriction Policy in Technical; mandatory profile perhaps? With AD you don't really need them as AD does that job now....
  1. #16

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,260
    Thank Post
    667
    Thanked 2,254 Times in 1,036 Posts
    Blog Entries
    23
    Rep Power
    670

    Re: GPo - Software Restriction Policy

    mandatory profile perhaps? With AD you don't really need them as AD does that job now.

  2. #17

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    Had been thinking about that but just tried on a test user withno mandatory profile - same problem - any shortcut on the desktop will run if its in the allowed list, but same program wont run from start menu

  3. #18
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: GPo - Software Restriction Policy

    Is the location of the start menu allowed? for example c:\documents and settings\username\start menu\ for unrestricted rights?

    the LNK start menu files need to be in a place that SRP has unrestricted access.

  4. #19

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    Thanks fooby - added the .LNK filetype and that sorted it!
    Set up folder redirection on the start menu and the desktop as well which is working a dream
    still getting an error with CScript.exe but reckon I need to open up the .VBS files to allow them to run.
    A few more tweaks and it'll be ready to roll out

    Their profile are locked down as tight as possible - start menu only has "Programs" and "Log off <username>" context menu removed from desktop, start menu and task bar, notification area gone access to all drives and network shares (bar one on the desktop)

  5. #20

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: GPo - Software Restriction Policy

    @Gatt: When you get it perfected you should post the policy settings (export an HTML document using GPMC) so that others can learn from your experience.

  6. #21

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    Will do ric, may be a few weeks til I'm happy that all the software I need is in place on the policy and that the "bugs" have been worked out
    the Plan is to implement it around the half-term break in Feb

  7. #22

    Join Date
    Aug 2005
    Location
    Birmingham, UK
    Posts
    490
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: GPo - Software Restriction Policy

    Did you install Office with the option to use MSI shortcuts? (i think it does this by default) If so i am going to hazard a guess that you havent allowed the location where the shortcuts point to access to run, but hte shortcuts on the desktop will probably be "normal" shortcuts so do not suffer the same problem.

  8. #23

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    @E1uSiV3 - I got Office sorted - had to un-restrict the .LNK files

    however, I still cannot get CSCRIPT.EXE to run even though I have authorised it to run along with VBS script files..

    I'm attaching a copy of my curent GPO policy settings - however this is not yet complete as i am going to try and limit the list of programs further and also start adding Favourites URLs

    It is a highly restricted profile for the students so i wont be flavour of the month with them when i implement it in a few weeks time!

    You can use these settings yourselves but please let me know of any improvements you think could be made to the policy
    Attached Files Attached Files

  9. #24
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: GPo - Software Restriction Policy

    The only problem with unrestricting the *.lnk part, is, i have an exe on my usb stick, all i need to do is create a shortcut to that exe on the stick (or user folder / home dir etc) then it will become allowed.

    What you should do, is

    unrestricted access to \\server\share\startmenu\
    which is a read only share, or unrestricted access to whereever the start menu files are.

    fooby

  10. #25

    Join Date
    Aug 2005
    Location
    Birmingham, UK
    Posts
    490
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: GPo - Software Restriction Policy

    Quote Originally Posted by Gatt
    @E1uSiV3 - I got Office sorted - had to un-restrict the .LNK files
    I didnt skip to page 2 before writing my answer whoops lol ops:

  11. #26

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    @ fooby: yeah i got a few wildcards to restrict, though at the moment the pupils cannot access their USB sticks at all!
    Trying to get my printers to map correctly as per this post from Ric_

  12. #27

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,774
    Thank Post
    873
    Thanked 674 Times in 443 Posts
    Rep Power
    503

    Re: GPo - Software Restriction Policy

    Ok just locked the little darlings out with the new policy (attached)

    had a few minor problems where I forgot to amend the path of the re-directed desktop and start menu - funny to se them all gripe about not being able to get on the web - out of a class of 31 only 1 said he couldnt get into Corel Draw!!

    Still got a few programs to add to the restriction list and trying to get the desktop to be enforced through either GPO or a Reg Hack.

    Comments & Suggestions welcome, and you are free to implement this as you see fit.
    Attached Files Attached Files



SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Software restriction policy, half working?
    By FN-GM in forum Windows
    Replies: 13
    Last Post: 10th December 2007, 01:22 PM
  2. Software Restriction Policy
    By cookie_monster in forum Windows
    Replies: 2
    Last Post: 27th November 2007, 01:54 PM
  3. CC3 Software Restriction Policy
    By cookie_monster in forum Network and Classroom Management
    Replies: 8
    Last Post: 12th June 2007, 11:28 AM
  4. Software Restriction Policy (w2k3) - path question
    By indiegirl in forum How do you do....it?
    Replies: 5
    Last Post: 19th October 2006, 06:05 PM
  5. Software Restriction Policy (w2k3) - path question
    By indiegirl in forum How do you do....it?
    Replies: 0
    Last Post: 19th October 2006, 11:11 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •