Hello all,
I'm struggling to centrally prevent MS paint from running. Here's the scenario:
We support a secure site for young offenders via VPN and RDP. The inmates are offered a range of web-based (Flash etc) education courses they are expected to complete while inside.
We have uninstalled just about everything extra we can before securing the workstations and then restricting them further by policy, but it seems we can't prevent MS paint from running.
Even when Paint is uninstalled, some of the active content in some of the web-based courses will cause it to be re-installed without user/admin intervention. I'm not sure how this happens, perhaps a .BMP file in the course materials or something, that then needs MsPaint installed to be viewed? Or a functionality in MS Office that is installed on the PCs maybe?
Anyway, the inmates like to draw and print naughty pictures to wind up the guards, and we've been requested to stop this from happening.
I've experimented with taskkill, but can't get the task to run under the restricted user's session.
No obvious GPO is available to prevent a certain .exe from running.
I need a method where I can kill, or prevent the start of certain named processes on domain member PCs. I need to be able to run this selectively and centrally.
Can anyone advise?
Thanks
BigFinn
I'm struggling to centrally prevent MS paint from running. Here's the scenario:
We support a secure site for young offenders via VPN and RDP. The inmates are offered a range of web-based (Flash etc) education courses they are expected to complete while inside.
We have uninstalled just about everything extra we can before securing the workstations and then restricting them further by policy, but it seems we can't prevent MS paint from running.
Even when Paint is uninstalled, some of the active content in some of the web-based courses will cause it to be re-installed without user/admin intervention. I'm not sure how this happens, perhaps a .BMP file in the course materials or something, that then needs MsPaint installed to be viewed? Or a functionality in MS Office that is installed on the PCs maybe?
Anyway, the inmates like to draw and print naughty pictures to wind up the guards, and we've been requested to stop this from happening.
I've experimented with taskkill, but can't get the task to run under the restricted user's session.
No obvious GPO is available to prevent a certain .exe from running.
I need a method where I can kill, or prevent the start of certain named processes on domain member PCs. I need to be able to run this selectively and centrally.
Can anyone advise?
Thanks
BigFinn
