Blocking ALL Executables in Students Home Directory

[DMcCoy]

I had to create an allow rule for *.mdb. It seems to be a known issue.

[Rozzer]

I made a allow rule but when i open the file with access 2003 it says.

 

"security warning: unsafe expressions are not blocked.

 

"Do you want to block unsafe expressions?"

 

Any ideas?

 

Ross

[fooby]

Hi Ross, thats to do with the macro security and such as far as I know, if you add the access ADM file to the group policy object you can set it to allow all (low security settings) for macro's and it should be ok.

 

fooby

[mortstar]

Blast from the past...

 

SRP working perfectly stopping executables running from pen drives and file screening stopping them even being moved to home drives...

 

Above was mentioned the idea of stopping mp3s from being 'run' from USB Pen Drives - has anybody had any clever(/BOFH) ways of denying this activity?

Edited October 20, 2008 by mortstar

[tosh74]

It doesnt seem to block executables on home directories for students areas (which are mapped to H:)

 

I am going to try %HOMEDRIVE% next to see if it works...

 

Mark

 

try %homeshare%

 

 

 

You did it already

Edited October 20, 2008 by tosh74

[User3204]

...Above was mentioned the idea of stopping mp3s from being 'run' from USB Pen Drives - has anybody had any clever(/BOFH) ways of denying this activity?

 

Have you tried defining them as Applications ?

I don't have Windows machine in front of me at the moment, but there is an option to add/remove filetypes that it can control. It's not within the actual "allowed locations/etc" part, but one "folder" back, if you right-click it gives a list of what is controlled.

[chazzy2501]

Sorry to revive this old post but..

 

I noticed that there is a Default Security Level that specifies Unrestricted. If I make this restricted then unrestrict the C:\ path this would disallow exes from any other path e.g "homeshare, a:, anyother networkpath,"

 

I am wrong or is there a price to pay?