Prevent Exe's from Drives

[Liam]

I know there are several threads related to this already but none of them really help me really..

 

~I have prevented students from running specified files via GPO and that all works great. I want to prevent students from being able to run mp3's and exe from their work area.

 

I have followed threads suggesting that i add a software restriction policy to do this..

 

so i have tried w:\*.exe and *.mp3 and they still run.

 

If i use the full path to outlook for example it will work and outlook will not run..

 

I have read that i can use wildcards but so far i have had no success.

 

Any suggestions. Would be great. I am probable missing something so simple.

 

Forgive me if i am being stupid.

 

Liam

[sonofsanta]

If you are running 2003 R2 (and presumably 2008, but I don't know for certain) you can restrict file types with File Server Resource Management - i.e. same bit that does quotas. I have it set so that EXEs are banned from all the student home folders, as well as bat, cmd etc.

[Liam]

Yes i seen that..Where is says command so i need to add a script to delete them?

[sonofsanta]

Doesn't need a script? At least, not for me...

 

On 2003 R2, I'm doing the following:

Open Manage Your Server if it isn't already open from startup

Click Manage this file server to open the FSRM snap in

Expanding File Server Resource Manager in the tree

Expanding File Screening Management

Right-clicking on File Screens and choosing Create File Screen

Browsing for the relevant path (e.g. Year\Home or however you do it)

Choosing Block Executable Files from the Derive... drop down

Clicking OK

 

If you want to play with e-mail notifications you can do it in the templates I believe

 

Not sure where you're looking if it's asking for a command...?

[Liam]

Sorted.. I presume this will prevent further additions but but not the ones currently there?

 

I will scan and delete them now.

[sonofsanta]

Sorted.. I presume this will prevent further additions but but not the ones currently there?

 

I will scan and delete them now.

 

I believe so - if you've set it up with the Block template it prevents the file being saved and also triggers an email notification to the user. Make sure you only set it on home directories and not profiles though, otherwise you get no end of panicked students when emails are triggered from Java updates etc. Possibly worth setting up a similar template that just silently does its thing for profiles. (or just set the template to only email you, and not them)

[Liam]

I have only confugred the template to run on work folders alone. As we dont use email for students here there is only my team that recieve the notification.

 

Thanks for your help!

[sonofsanta]

I have only confugred the template to run on work folders alone. As we dont use email for students here there is only my team that recieve the notification.

 

Thanks for your help!

 

No worries!

 

/subtly winks at +rep and Thanks buttons