Preventing users from running executables from their home drives and usb drives

[prad]

There are various ways of doing this, but I don't think I've got the best method as there are reports of users still runing exe files.

 

any suggestions appreciated.

[timbo343]

We do ours throught Software Restriction Policy in Group Policy

[ict_support]

File resource manager also works well too

[AngryITGuy]

We do ours throught Software Restriction Policy in Group Policy

 

Same here, we also use USBDLM to control what driver letter is assigned to a USB device which helps when creating the policy.

 

If you want more information on this check out the the following thread

 

Stopping .exe files from being run from a USB stick

[ict_support]

For the software restiction policy you will have to add a few drive letters past what is on the Pc. For example if you PC has a C: and a D: drive you will need to put software restrictions on E: and F: depending on what is the next avaliable drive letter for the USB drive. Some of the more cunning students may use multiple usb drives so they get assigned a different drive letter etc...

[prad]

thanks everyone... that's been useful.

[IanT]

I use File Resource Manager in 2003 R2 to stop .exe and all .mp3...........works really well, I also setup Email Notification of when someone "trys" to put a exe or mp3 in there user area.