asked on

Group Policy for download restrictions

Is there group policy to restrict file downloads of .exe, .zip and .msi files? If so how is this done, I am not understanding the verbiage that is in the Restrict File Download hive within the GPeditor/

ASKER CERTIFIED SOLUTION

expexchuser

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Rich Rumble

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

netmunky

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Rich Rumble

Yes, proxies ensure that you can better enforce these rules for all users and all browsers, as do content filtering firewalls as linked by expexchuser. However nothing is guaranteed, as even proxies and content firewalls have their limitations such as SSL traffic and or other tunneled protocols like SCP.
-rich

expexchuser

Yeah, I agree there is no magic bullet. Heck, even a virus can bypass border gateway antivirus and intrusion prevention systems if it comes in over SSL. Good points, Rich. I still think content filtering is the closest you can get to taking control over your network traffic, though. It gives you analysis abilities in addition to just saying "hey, block this type of traffic/download" regardless if the user initiated it or not.

expexchuser

PS - it should be obvious, but you have to copy and paste my original link into your browser b/c of the parenthesis in the URL.