Hello all.
At our school, we have the running of exe files blocked from running from memory sticks and we also do not allow students to install software. However, clever as these kids are, they have found out that any self contained exe games that just run a game when double clicked and not install, will run perfectly fine if copied to the desktop. We have super mandatory profiles here and any changes they do to the desktop are only temporary. I have managed using software restriction policies to stop the running of exe files from the desktop. I have also managed to stop them from running exe's with a one level folder. However, if the folder is in the next level down, it will run the exe and I can't seem to stop that. this is what I have set to disallowed.
C:\users\%username%\destop\*.exe (blocks exe files directly ran from the desktop) - Works fine
C:\users\%username%\desktop\*\*.exe (blocks anything within a folder at the first level from running e.g C:\users\bloggsj\desktop\myfolder\myexe.exe) - Works fine
However anything in a folder at the next level down is not blocked e.g C:\users\bloggsj\desktop\myfolder\myfolder1\myexe.exe - exe runs
Because we don't know what the folder or exe will or can be called, I would like to know if there is a variable that basically looks at C:\users\%username%\desktop\ and will check any paths after this and stop exe.
Thanks in advance
David