Re: Software Restriction Policies

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Matt Ball (matt_ball_at_landon.net)
Date: 03/03/04 

Date: Wed, 3 Mar 2004 09:48:34 -0500

Thanks Stew!

"Uncle Stewie" <whoever@whatever.com> wrote in message
news:%23cmYlr7$DHA.2512@TK2MSFTNGP11.phx.gbl...
> Matt,
>
> 2003's new feature for Software Restriction is supposed to solve these
> issues... However I am not able to use it in the way I would like, nor has
> there been any help forthcoming in the newsgroups to date...
>
> In 2000 However... the only what that I know of is still using the
Restrict
> Run List... Which was available in NT 4 as well... You can set the setting
> in Policy, the drawback being it is restricted through the Windows Shell
> ONLY... which means if they execute through a command prompt... well they
> have full unfettered access... You have to do some trickery to avoid them
> running cmd.exe... Take away command prompt so they cannot access command
> line inferences...
>
> Stew Basterash
>
> "Matt Ball" <matt_ball@landon.net> wrote in message
> news:ur$T%2346$DHA.3352@TK2MSFTNGP09.phx.gbl...
> > I am running Windows 2000 Advanced Server (SP4) and Windows 2000 Pro
(SP4)
> > clients. I would like to restrict certain programs (i.e. telnet) for
one
> of
> > my Global Groups.
> >
> > I undertand that in Windows 2003 Server there is a Global Policy setting
> > (http://support.microsoft.com/default.aspx?kbid=324036) where you can
> enter
> > the path of any application you want blocked from use. But that setting
> is
> > not in Advanced Server 2000. Does anyone know of a workaround for
this?
> > Can I block an executable for a group somehow?
> >
> >
>
>