Solved

Blocking exe files for ordinary users

Posted on 2003-11-04
9
1,087 Views
Last Modified: 2013-12-04
How do I block ordinary users to execute exe or ordinary install files ?
I don’t won't changes to effect admin


/tom
0
Comment
Question by:tomblomberg
  • 2
  • 2
  • 2
  • +1
9 Comments
 
LVL 32

Expert Comment

by:Luc Franken
ID: 9678640
>How do I block ordinary users to execute exe
Just don't, they will be unable to run any program.....

>or ordinary install files
don't give them more than user rights, if they have superuser or administrator rights they can install programs, especially don't give them any local rights.

LucF
0
 

Author Comment

by:tomblomberg
ID: 9678880
I have not given then more the user rights thats on of the proglem, can't i block it from the register ?

/tom
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 9678940
Nope, as I said before, blocking all exe files makes a computer useless. Then they won't even be able to run Word, just to give an example.

Just don't give them any local rights. And make sure you haven't given them those rights in active directory.

LucF
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 18

Accepted Solution

by:
JConchie earned 25 total points
ID: 9679878
You can do this in group policy, creat an OU called "Restricted" and put the users you want in it.  In the default group policy of that ou, go to:
User Configuration/Administrative Templates/System and enable "Run only specified windows applications"  and select the apps you want these users to have.

If you also go into Administrative Templates/Start Menu & Taskbars, and enable "remove run menu from start menu",  you will prevent users from working around you and using the run command to start programs.
I
0
 

Expert Comment

by:uwmis
ID: 10336866
go to active directory  under default domain policy and restrict the all the .exe files that you dont want to run.
0
 
LVL 18

Expert Comment

by:JConchie
ID: 10337655
uwmis,

Thanks for repeating the answer I posted three months ago.

tomblomberg:  This question has been open too long. Please ask for more information if needed, or close and award points.
0
 

Expert Comment

by:uwmis
ID: 10345801
Yes, I give you full credit to Jconchie for giving that great solution, i learned that from him, works well with my network.  Not trying to take credit for anything here, i'm just here to learn.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now