Help with .exes and proxies

[Mark182]

We have an issue where ICT need to run .exes for small basic, scratch and a few other bits. We have an issue now where students are running wild. Running things such as ultrasurf ect. We are using group policy hash rule to block them but are fighting a losing battle. We use tree size pro to delete all dodgy stuff, In our Sophos console under “application control” we have Proxy/VPN selected but all that seems to do is flag up when someone is using one of them tools. In lightspeed we have this ticked “Block P2P networks

Block all unidentified UDP connections, Skype, UltraSurf type traffic, and file-sharing networks such as BitTorrent. “

So my main two issue are students running .exe and using proxies. Anyone any advice?

 

Running Windows 7 Pro ( so no applocker)

Server 2012R2

[Steve21]

Re-block exe for a start

 

If they "need" small basic etc, setup a virtual machine locally.

 

Scratch

[Mark182]

Re-block exe for a start

 

If they "need" small basic etc, setup a virtual machine locally.

 

Scratch

 

That's what we have looked at doing, how would/do you do it

[Steve21]

Search on here for Virtualbox there's loads of threads made about it down to configuring the VM/lock downs etc

 

Steve