Restricting Microsoft Games via Group Policy 2

[jdblack]

Managment has decided that to much time is being spent playing the games on our 2K and XP machines. They would like all access for these removed. I would like to do so using Group Policy but to date have been unable to determine how to accomplish.
Any help would be appreciated.

 

[mrmoneymatters]

In group policy, go to
user settings, administrative templates, system, don't run specified applications.
All you have to do is list the executable for each app you don't want to allow them to run. Works great.

 

[jdblack]

Thanks!
Works like a champ. I have now managed to alienate 80% of our workforce.....

 

[mrmoneymatters]

Glad to help.

 

[AlexIT]

Star for Mrmoneymatters, been all through the GPO and never thought of using that...

 

[ningbo]

if the user change the app's name,he can still play game.

 

[mrmoneymatters]

Correct, but most users couldn't do that. When they move to 03server he can set up hashing rule, that will fix that.

 

[jdblack]

Hate to act stupid here, but the DC is on 03server. What is the hashing rule of which you speak? Sounds interesting.

 

[mrmoneymatters]

The hash rule. I think it looks at the way an app works and takes a snapshot or something, then if another program does the same thing it will block it even though the name could have been changed. Sorry that sounds a little shady but I haven't got to work with it yet.
You go to group policy, user settings, windows settings, security settings, software restrictions, rules, then right click and choose create new hash rule.

I also provided a link for you. This is new to 2003 server and xp clients.

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/srp_hash.mspx

Hope this helps