Prevent Game executable from Running in server 2003 1

[DigitalWreck]

Hi,

I work in the IT department for a school and we've recently had a problem whereby kids are bringing in games on flash drives and executing them on our networked computers.

Does anyone know of a way of preventing selected executables from being executed via a group policy in server 2003 with XP professional clients?

Thanks

 

[IllogicallyLogical]

Yes, you can do this with Group Policy.

Navigate to User Configuration\Administrative Templates\System

Find the policy "Don't run specified Windows applications", enable the policy and click Show by List of disallowed applications. Add the names of the executables, like aim.exe for example. You will need to know the specific executable name.

As an alternative you could configure "Run only allowed Windows applications". This way you can limit them to only running the applications you specify.

Joey
A+, Network+, MCP

 

[nsanto17]

You can also disable the use of Flash Drives on your network by use of Group Policy

 

[DigitalWreck]

Excellent. Thanks for the help guys!

 

[porkchopexpress]

If you are using all XP then take a look at software restriction policy it's far more versatile. If the kids start renaming the exe then it will run again but with software restriction you can hash the exe so if will fail regardless of name. You can also ban using path rules and ban .bat and .vbs files it's really very impressive.

 

[DigitalWreck]

Thanks porkshopexpress,

The hash restrictions works perfectly. LiveMessenger and CounterStrike will finally come to an end...i hope.

 

[porkchopexpress]

No probs. Just remember that when a new version comes out you will need to re hash it, so it could be an idea to use path rules as well.

 

[tfg13]

Excellent PCE. You deserve a star!

BTW, I was going to mention that, but you beat me to it!

 

[porkchopexpress]

Thanks tfg13