Software Restrictions Policy

[adrianjones]

Hi

 

Been trying to stop the kids running EXE files from their USB Memory Stick. Can this be done through Software restrictions group policy?

[Bob_the_Goon]

Absolutely. Make the policy Restricted so therefore everything is blocked. Then just add the files or locations you want to allow. The SRP will effectively become a whitelist.

[Mr.Ben]

Use Applocker, it's much better than the only allow these exe files in group policy.

[jertsy]

I agree with @Mr.Ben, Im just in the process of migrating from SRP to Applocker. Something to bear in mind though, is that Applocker only works on Enterprise and above OS.

[adrianjones]

Will Applocker work on windows 10 education?

[jertsy]

Will Applocker work on windows 10 education?

 

I believe so as its based on Enterprise

[Michael]

Will Applocker work on windows 10 education?

 

Yes it does, but I would also approach Applocker with caution. If (for example), you block a lot of the Apps (such as Photos or Edge) and then later enable them, it doesn't do so gracefully, so you end up having to re-install the OS.