Re: Group policy and executeables

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

You can implement Software Restriction Policies that will disallow all
executables from running except those that you specifically name.

This requires careful testing before implementation, as you can
inadvertently prevent yourself frm running even necessary Windows files if
you're not careful.

Here's a good tutorial to get you started:

http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html

HTH


--
Laura E. Hunter: MVP Windows Server - Networking
All replies to newsgroup, please
Post provided as-is, no warranties expressed or implied

"Anthony" <Anthony@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C8C0D391-3CDB-420C-B9A8-1422AFFE2C75@xxxxxxxxxxxxxxxx
> Hello all,
>
> Is there a way to block all executables for users in group policy object
> editor within AD?
>
> We use group policies on our OU's within AD to lock down users, and I need
> a
> way to block all exe's from being ran from a user within the OU that has
> exe''s policy added to be blocked.
>
> This is for Win. 2003 server.
> Thanks


.

Relevant Pages

  • Re: restrict using registry
    ... To answer your question - have a look at Software Restriction Policies in Group Policy to restrict the use of certain executables such as RegEdit or MMC. ...
    (microsoft.public.win2000.group_policy)
  • Re: Executable Whitelisting via GPO
    ... Given the possibilities you have with Software Restriction Policies in Group Policy or 3rd party software, you can do that pretty reliably. ... Maintenance is the next part as new software comes along, new software releases, service packs and hotfixes change signatures of executables. ... Software restriction policies are a good thing to look at if you're on Windows XP and above machines. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disable IE
    ... Software Restriction Policies, which will enable or disable certain ... executables based on various criteria that you can set. ... Responses provided as-is; ...
    (microsoft.public.windows.group_policy)