Software Restriction Policy (w2k3) - path question

[indiegirl]

Hello all,

 

I'm setting out SRP up to stop the little darlings from running exes etc from their home drives. I have searched for an answer to the query I'm about to pose but didn't find an answer.

 

So, my question is:

 

If I implement a 'path' restriction, eg:

 

\\fileserver\%username% - will that restrict everything in that path that's in the 'file types' properties (I assume it does)

 

Can I - for peace of mind - also restrict just one type, and if so, would this work:

 

\\fileserver\\*.exe ??

 

Can I use this to restrict just .exe's and zip's from that share? Or is that overkill given the file types cover .exe and more?

 

Sorry - probably a v silly question, but one I need reassurance on!