Blocking files execution

[Sydders01]

Hi All,

 

Please any ideas on how to use group policy to block users from running a .exe, batch ,.crt and content of a compressed folder. I have done this via AppLocker and is not working

 

Thanks

[Guest Guest]

Hi All,

 

Please any ideas on how to use group policy to block users from running a .exe, batch ,.crt and content of a compressed folder. I have done this via AppLocker and is not working

 

Thanks

Have you enabled the service? Is enforcement of the rules enabled?

[Sydders01]

Have you enabled the service? Is enforcement of the rules enabled?

 

I think so. see below the link i used to configure this

 

[MrKJLS]

Hi All,

 

Please any ideas on how to use group policy to block users from running a .exe, batch ,.crt and content of a compressed folder. I have done this via AppLocker and is not working

 

Thanks

 

You need to make sure the application identity service is running, you can enable it with group policy

[Sydders01]

You need to make sure the application identity service is running, you can enable it with group policy

Thanks , I did that according to this video.

[MrKJLS]

Thanks , I did that according to this video.

 

Ah good, you might find you have to reboot the computer for it to take effect. Make sure your rules are set to enforced

 

[Guest Guest]

Which edition of windows are you running? Applocker is only supported on Enterprise and Education

[Sydders01]

Which edition of windows are you running? Applocker is only supported on Enterprise and Education

 

 

I running Education

[Sanchez]

Does executing a file in a compressed folder decompress it to a temporary folder somewhere? If so applocker rules would need to be applied to the temp folder.

[TechMonkey]

Have you checked Event Viewer to see what is happening? The logging is pretty good and not in the general list, it has its own area under Microsoft. It will show you if something is allowed, being ignored or blocked.