Restricting access to programs 1

[TechnicalTim]

I have a corporate network with Active Directory and Windows 2000 Clients. I'd like to be able to limit access to specific applications. More specifically, I want to be able to stop people from running wmplayer.exe (Windows Media Player recent versions) and/or mplayer.exe (older versions). We’ve already stopped streaming media etc, but (for productivity reasons) we want to stop people using the program itself. Any ideas would be great..

Thanks!

 

[thorswolf]

You'll need to set up a Domain or Group policy. In AD, open the AD Users and Computers. Right-click the root of your Domain and select Properties. Go to the Group Policy tab, select Default Domain Policy and click Edit.

Under User configuration, expand Administrative templates and click on System. In the righ-hand pane, you will see a policy called "Don't run specified Windows applications". Double click this policy, set it to enabled, click the Show button and add the executable for the program you want to disallow.

You can also do this at any level of your AD, so you can disallow it for one group but not for another.

Hope it helps

 

[TechnicalTim]

Exactly what I wanted - thank you very much.

Who would have thought it was so simple...