adrianjones Posted November 24, 2016 Posted November 24, 2016 Hi Been trying to stop the kids running EXE files from their USB Memory Stick. Can this be done through Software restrictions group policy?
Bob_the_Goon Posted November 24, 2016 Posted November 24, 2016 Absolutely. Make the policy Restricted so therefore everything is blocked. Then just add the files or locations you want to allow. The SRP will effectively become a whitelist.
Mr.Ben Posted November 24, 2016 Posted November 24, 2016 Use Applocker, it's much better than the only allow these exe files in group policy.
jertsy Posted November 25, 2016 Posted November 25, 2016 I agree with @Mr.Ben, Im just in the process of migrating from SRP to Applocker. Something to bear in mind though, is that Applocker only works on Enterprise and above OS.
adrianjones Posted November 25, 2016 Author Posted November 25, 2016 Will Applocker work on windows 10 education?
jertsy Posted November 25, 2016 Posted November 25, 2016 Will Applocker work on windows 10 education? I believe so as its based on Enterprise
Michael Posted November 25, 2016 Posted November 25, 2016 Will Applocker work on windows 10 education? Yes it does, but I would also approach Applocker with caution. If (for example), you block a lot of the Apps (such as Photos or Edge) and then later enable them, it doesn't do so gracefully, so you end up having to re-install the OS.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now