OU to disables access to games under W2K Pro.

[dtorres]

Is there a way via AD to set a policy that will disable to access to the default games on W2K Pro machines? I have created a policy to not allow the .exe associated with the game to not be launched but users have found out that by renaming the .exe they can continue to use the game of their choice.

Thank You

"D

 

[enbw]

Do they need access to their local hard drive?

 

[bofhrevenge2]

If they do need access to their hard drive you could use a script or create an MSI to remove the games.

 

[Stevehewitt]

To be extra tight, spend a while over a period of a couple of days making a note of all apps the users run. This includes AV, Explorer.exe - every possible app they need to run.
(not sure if flash etc run a process or not but you get my drift)
Then simply set Group Policies to prevent access to all apps other than specified. (which you now have). Trial it on a group of PC's and if it works then you not only will have stopped the games but it's also a bloody good defence against many viruses.

You may also want to issue other members of staff (managers etc.) with a notice than no apps will be allowed to run without prior IT consent due to security reasons. And of course now they don't really have a choice.

Total Lockdown!

Good Luck,


Steve.