Blocking specific file for selected user/group

[penfold]

Hi,

 

We have a piece of software which needs to be installed on all computers in 1 room but restricted to only run for certain users. We have a piece of software which has 2 modules and uses the same username/password for both and the user cannot be restricted on their account. In the past this has been done by not installing the client module on specific computers but I want to be able to offer the same software on all machines so users can use any computer. I can put a block in place by entering the .exe under User config>Admin Templates>System>Don't run specific applications but this then means that I need to separate the users into different OU's as far as I can see and I don't want to do that as we are already have our OU's broken down enough.

 

Is there any way I can put a block on a file by user group so I can add the un-authorised users to one group?

 

Cheers

[penfold]

OK, I think I've found out how to do what I want. I've simply added the user to the security group that the Group Policy applies to and removed the authenticated users. So now I should be able to add all the users I want this restriction applied to and everyone else will be excluded.

[Sir]

Exactly!

[seawolf]

Or, you might also be able to use the File Screen feature in Windows 2008 R2 to accomplish this.