Re: Hash Rule vs. Path Rule

Hi Brandon,

PKI Enhancements in Windows XP Professional and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx

How To Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;324036

See the Notes under:
How to Create a Hash Rule
How to Create a Path Rule

Basically, a Path Rule can be overcome by copying or moving the target
software to a different location. A Hash is a digital fingerprint that
uniquely identifies a program or file. A file can be renamed or moved to
another folder or computer and it will still have the same hash.


--
Merv Porter [SBS MVP]
===================================
==============================
"Brandon" <bsmith@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23CCiSzeeGHA.1320@xxxxxxxxxxxxxxxxxxxxxxx
Can someone explain to me in plain language (code samples would be
helpful) the difference between a Hash Rule and a Path Rule Software
restriction policy in Group Policy?

--
Brandon
Presentations Direct - "Document Finishing Solutions"
http://www.presentationsdirect.com



.

Relevant Pages

  • RE: block EXE running from %userprofile%
    ... so there is no need to create a hash rule to allow running these ... > Jeff Qiu ...
    (microsoft.public.windows.group_policy)
  • Re: Disk Defragmenter Hash Rule
    ... Thanks for responding, ... "Steven L Umbach" wrote: ... >> Does anyone have an idea why my Hash Rule against users running the Disk ... >> If I specify a path rule for the MSC file that doesn't work either! ...
    (microsoft.public.windows.group_policy)