+ Post New Thread
Results 1 to 6 of 6
Wireless Networks Thread, Group policy in Technical; Hi I have a little problem and I have got stuck. Please can you help. I want to stop kids ...
  1. #1
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52

    Question Group policy

    Hi

    I have a little problem and I have got stuck. Please can you help.

    I want to stop kids running things from there my (documents) H: and from the e: drive where usbs are mounted.

    The file extensions I am trying to stop running are.

    .bat
    .exe
    .vbs
    etc

    I have created a path rule in gpo and linked it to the correct ou things like

    h:\*.bat
    h:\*.exe

    and this works great except it only blocks things in the root of the area.

    Has anyone got any ideas how I can block any files with these extensions in other folders on the drives.

    Thanks for all your help.

    Richard

  2. #2
    flyinghaggis's Avatar
    Join Date
    Jan 2006
    Posts
    1,068
    Thank Post
    108
    Thanked 78 Times in 60 Posts
    Rep Power
    116
    You just need to add the file extension you want to block into the 'designated files types' list. Then you can add a disallow path rule for 'H:\' and it'll automatically block everything on the file types list from running on that entire drive
    Last edited by flyinghaggis; 26th February 2008 at 05:43 PM.

  3. #3
    Steven's Avatar
    Join Date
    Apr 2007
    Location
    Morecambe
    Posts
    114
    Thank Post
    6
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hi, How do you Add a mapped network drive so its the users "My Documents" as a home folder via GPO many thanks steve.

  4. #4

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,808
    Thank Post
    880
    Thanked 684 Times in 453 Posts
    Rep Power
    505
    Quote Originally Posted by Steven View Post
    Hi, How do you Add a mapped network drive so its the users "My Documents" as a home folder via GPO many thanks steve.
    You cant with Win2k3, but you can with Win2k8 - when the necessary Client Side Extension is released for WinXP.. It's supposed to be in-built with Vista SP1 but not tried it yet...

    You need to use a batch file or, as we do here a KixTart script that maps the relevent drives, then also calls a VBScript file to rename them from "share on 'server'"

    You can, however, redirect their My Doc's folder to their home drive using Folder Redirection....

  5. #5
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    I add the drives through a mapping script at log on. I dont what to block everything from the h: drive as this would stop them getting at personal documents . I just what them not to be able to bring in exes, etc on usb drives and copying them to my documents. Then being able to run exes, etc on usbs and those in my documents.

    Richard

  6. #6
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    271
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48
    You define the executables you want blocking Richard in the computer settings of software restriction policies - it doesn't block 'everything' - only the files with extensions that you specify



SHARE:
+ Post New Thread

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 11:03 AM
  2. group policy not being seen at all
    By krisd32 in forum Windows
    Replies: 5
    Last Post: 31st August 2007, 10:07 AM
  3. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 01:17 PM
  4. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 9th November 2006, 12:48 AM
  5. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 10:39 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •