Thanks for your input mtdanielson
I dont want to leave this question open too much longer.
We have blocked the externsions in AD and thanks to your suggestion of CHM files, that has also been incldued.
As with the software policy restrictions we have opted not to use that in our case.
Thanks for your input.
Main Topics
Browse All Topics





by: mtdanielsonPosted on 2008-04-18 at 12:00:31ID: 21388682
In addition to .hlp, I recommend blocking the .chm (HTML Compiled Help File) extension as well, as most current applications release these extensions.
om/default .aspx?scid =kb;en- us; 324036
om/en-us/l ibrary/cc1 79143.aspx
It sounds like you're on the right path with using GPO - specifically you'll be looking at Software Restriction Policies. There's information on file extension blocking specifically at http://support.microsoft.c
Additionally, you can restrict specific keys and actions within the apps (such as online help) by disabling the objects Control ID within the GPO. You can see more about it here:
http://technet.microsoft.c