Trouble Creating an Application Whitelist via GPO

[ajstan]

Hi,

 

I'm having problems with students running executables and have decided to be a bit more restrictive. I've configured it but the desktop shortcuts won't work

 

I've created a test OU, policy and user to play with.

 

Under: 'User Config-> Policies-> Windows Settings -> Security Settings -> Software Restriction Policies -> Security Levels' I have selected 'Disallowed' so everything is blocked.

 

Under: 'User Config-> Policies-> Windows Settings -> Security Settings -> Software Restriction Policies -> Additional Rules' I have added (see pic below)

 

Now this works well, I can open everything in start menu no probs BUT the desktop shortcuts (which are deployed via Group Pref) are blocked by group policy. This means I can open Excel through start menu but not with the desktop icon.

 

I've added *.Ink and even %DesktopDir%\*.Ink in an attempt to make it work but I'm still having no luck.

 

I'd be grateful if somebody can help me

[simpsonj]

Could try adding %USERPROFILE%\Desktop\*

Or you could change the 'Designated File Types' and remove .lnk (shortcut) files.

[ajstan]

Thanks for the reply. I found I'd made the rather moronic mistake of writing *.Ink instead of *.Lnk.

 

At least its sorted now lol