Re: How can I prevent a certain program from being run?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Look into Software Restriction Policies

***Do testing on a test domain, not your production domain, you can cause
serious problems with these things***

http://support.microsoft.com/kb/324036/en-us for a start

and take note of this
http://technet2.microsoft.com/WindowsServer/en/Library/baf8b152-f95b-4f08-9111-be2170d1956d1033.mspx?mfr=true

You can add .dvb to the Designated File Types
Then assign a path rule to allow those that reside on your server.


Regards
Mark Dormer

"Cecelia" <Cecelia@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:89E0867E-9043-4FC8-B465-9250D687CD29@xxxxxxxxxxxxxxxx
Unfortunately I already know all of these ideas but those don't address my
question. This is NOT and exe file, and it's not a matter of permissions.
Everybody has permissions to the programs I want them to use. What I want
to
prevent is people from using any OTHER programs (once again these are not
.exe's). For example, I don't want them to bring in their own .dvb files
and
be able to use them, only those that are on the server can be allowed.
Does
this clarify things more?
Thanks.

"Ronnie Vernon MVP" wrote:

You can explicitly set file/folder permissions to individual users and/or
groups.

HOW TO Create and Configure User Accounts in Windows XP
http://support.microsoft.com/kb/279783

HOW TO Set, View, Change, or Remove File and Folder Permissions
http://support.microsoft.com/kb/308418

HOW TO Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/kb/308419

HOW TO Set the My Documents Folder as Private in Windows XP
http://support.microsoft.com/kb/298399

Of course you can also encrypt the desired files/folders.

Best Practices for Encrypting File System
http://support.microsoft.com/kb/223316

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"Cecelia" <Cecelia@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:473BB960-6592-490B-87FF-6A62A0BF7CD3@xxxxxxxxxxxxxxxx
This is a 2-part question but I'd appreciate any help/ideas I can get:

1) I was wondering how an administrator can prevent a power user from
running a certain program if it is NOT an executable? Specifically I
want to
block them from running a VBA program (has an extension of .dvb).

2) On a related note, how can I block running a program if it is in
one
location, but they CAN run the file if in a different location? I'm
trying
to prevent end users from running a program on the pc if it is not in
the
server location that I specify.

THANKS IN ADVANCE



.

Relevant Pages

  • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
    ... In order for Alice to Take Ownership of Bob's private folder she would ... Owner and now Bob no longer has the ability to set permissions on it. ... And Windows does have a umask-like function. ... This article contains a set of attack scenarios to demonstrate security ...
    (Full-Disclosure)
  • Re: User rights problem (Least Privilege)
    ... After giving write permission to Users group on Windows folder the ... >> I am managing a small network with Windows 2003 as DC and XP as clients. ... > inexperienced or limited user should ever have write permissions. ... > limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password
    ... You don't assign passwords to files in Windows XP, ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OT I need some help from the computer gurus
    ... far as I can tell all permissions are open. ... right-click the shared documents folder and select share this folder and ... He tried to send me to Google ... If you haven't done it already, try restarting Windows. ...
    (rec.outdoors.rv-travel)
  • Re: Modify advanced permissions using wsh on W2K Server
    ... the checkbox that applies changes made to a folder to ... parameters it requires to accomplish your permissions changes. ... >> Two lines of your gifted experience with windows ... >> In the event you had not unchecked the daylight savings time box ...
    (microsoft.public.scripting.wsh)