Block portable apps

[ricardofilipe]

Hi ! Is there any way that i can block users from running portable apps?
I have been asked to block messengers and several download apps for torrents and peer to peer. Problem is that there are hundreds of apps that can do this, and i can't just add them all. Users bring these apps on pen disks and can access forbidden content also, like online radios for instance, using firefox portable or other browsers.
I have a 2003 server domain with several group policies implemented and I am also running ISA Server 2006 with GFi Webmonitor.
I've thought about blocking the usage of usb pen disks, but they are needed... is there any other way ? Apart from threatning them with unemployment

Sorry for the confusion and any english mistakes. Thanks for the help.

 

[IllogicallyLogical]

You can use Software Restriction Policies. Have a look at the following links for more information on using this feature. You can also search this site for "Software Restriction Policy" and find some informational threads on the topic as well.

- Using Software Restriction Policies to Protect Against Unauthorized Software

http://technet.microsoft.com/en-us/library/bb457006.aspx

- Software Restriction Policies How To...

http://technet.microsoft.com/en-us/library/cc782430(WS.10).aspx

- How To use Software Restriction Policies in Windows Server 2003

http://support.microsoft.com/kb/324036

- Using Software Restriction Policies To Keep Games Off Of Your Network

http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html

Joey
CCNA, MCSA 2003, MCP, A+, Network+, Wireless#

 

[dberg35]

The other option is block the USB ports they run on.

 

[cmeagan656]

I've thought about blocking the usage of usb pen disks, but they are needed.

We block USB pen drives and CD/DVD drives on all workstations except one. That one computer is our "resource" computer. If a client brings in data on a USB drive or a CD/DVD then the user must use the resource computer to copy the data to a network share.

Hope this helps.

Please help us help you. Read Tek-Tips posting polices before posting.