MSN Policy 1

[zacksack]

Good morning everyone!

We recently upgraded our Domains to 2003! YEAH

Anyways I was wondering if there was a way to remove MSN messanger from desktops. Either remove it or prevent users from logging in.

Thanks in advance

Zack

 

[mikiemov]

Hi there,

In Group Policies: User -> Admin Templates -> System there is a policy titled "Don't Run Specified Windows Applications." Link that to an OU and specify "msmsgs.exe" as an executable to prevent.

The users will then get a popup message when they try to run MSN.

This policy can of course be used, to prevent the running of any exe file..

Mike,

 

[zacksack]

Thanks Mike!

I created a policy and put myself in it. I Cant run MSN and I do get a pop up. However I just renamed the exe and I can run msn again. Is there anything to prevent users from doing this?

 

[porkchopexpress]

Don't give your users admin access to the desktop then they can't rename files in the program directory, if users have admin access then they can pretty much get around any GP and they can also just install messenger anyway.

If it's Windows Messenger that you mean then there is a policy too stop that but again an admin can get around this.

Administrative Templates > Windows Components > Windows Messenger

Do not allow Windows Messenger to be run.

Do not automatically start Windows messenger initially.

One other option is similare to what mikiemov said but you can use the "only run specified windows apps" policy but this means you will have too enter all the apps that you want users to be able too run.

 

[zacksack]

Thanks a lot everyone

I really appreciate it!

I will remove local admin rights

Thanks again

Zack