Re: How do I prevent a user from launching an Application

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 09/26/04


Date: Sat, 25 Sep 2004 19:38:34 -0500

Christopher Walker wrote:
> You can use software restriction policies, and obtain the hash rule
> for the app this means that where ever it is (different folders, on a
> floppy) the app cant be launched.
>
> You can set these policies through GPO in computer or user

Don't run specified Windows applications

User Configuration\Administrative Templates\System

Description
Prevents Windows from running the programs you specify in this policy.

If you enable this policy, users cannot run programs that you add to the
List of disallowed applications.

Note

This policy only prevents users from running programs that are started by
the Windows Explorer process. It does not prevent users from running
programs, such as Task Manager, that are started by the system process or by
other processes. Also, if you permit users to gain access to the command
prompt, Cmd.exe, this policy does not prevent them from starting programs in
the command window that they are not permitted to start by using Windows
Explorer.

I don't believe doing by hash matters. Running from the command prompt
still bypasses it.

-- 
<- Shenan ->
-- 
The information is provided "as is", it is suggested you research for
yourself before you take any advice - you are the one ultimately
responsible for your actions/problems/solutions.   Know what you are
getting into before you jump in with both feet. 


Relevant Pages

  • Re: How do I prevent a user from launching an Application
    ... the hash rule ... >> floppy) the app cant be launched. ... >Don't run specified Windows applications ... this policy. ...
    (microsoft.public.windows.group_policy)
  • Re: setting policies on WinXP Home
    ... Policy tools are not part of, and do not run in, Home ... setting by direct registry manipulations. ... However, contrary to an earlier post, as this app does ... Microsoft MVP (Windows Server System: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: changing file associations
    ... resets the file associations for my TIF files to what I assume is the Microsoft default (windows Picture Viewer). ... Currently we have a resource that goes arount to every PC and manually resets the association. ... POLICY!!policyName ... firstApp = First App ...
    (microsoft.public.windows.group_policy)
  • Re: setting policies on WinXP Home
    ... interact with the desktop" does not. ... If we knew more about the app we might be able to offer better feedback. ... > Policy tools are not part of, and do not run in, Home ... > Microsoft MVP (Windows Server System: ...
    (microsoft.public.windowsxp.security_admin)
  • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
    ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
    (microsoft.public.de.german.windowsxp.gruppen.richtlinien)