• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1099
  • Last Modified:

Blocking exe files for ordinary users

How do I block ordinary users to execute exe or ordinary install files ?
I don’t won't changes to effect admin


/tom
0
tomblomberg
Asked:
tomblomberg
  • 2
  • 2
  • 2
  • +1
1 Solution
 
LucFCommented:
>How do I block ordinary users to execute exe
Just don't, they will be unable to run any program.....

>or ordinary install files
don't give them more than user rights, if they have superuser or administrator rights they can install programs, especially don't give them any local rights.

LucF
0
 
tomblombergAuthor Commented:
I have not given then more the user rights thats on of the proglem, can't i block it from the register ?

/tom
0
 
LucFCommented:
Nope, as I said before, blocking all exe files makes a computer useless. Then they won't even be able to run Word, just to give an example.

Just don't give them any local rights. And make sure you haven't given them those rights in active directory.

LucF
0
Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

 
JConchieCommented:
You can do this in group policy, creat an OU called "Restricted" and put the users you want in it.  In the default group policy of that ou, go to:
User Configuration/Administrative Templates/System and enable "Run only specified windows applications"  and select the apps you want these users to have.

If you also go into Administrative Templates/Start Menu & Taskbars, and enable "remove run menu from start menu",  you will prevent users from working around you and using the run command to start programs.
I
0
 
uwmisCommented:
go to active directory  under default domain policy and restrict the all the .exe files that you dont want to run.
0
 
JConchieCommented:
uwmis,

Thanks for repeating the answer I posted three months ago.

tomblomberg:  This question has been open too long. Please ask for more information if needed, or close and award points.
0
 
uwmisCommented:
Yes, I give you full credit to Jconchie for giving that great solution, i learned that from him, works well with my network.  Not trying to take credit for anything here, i'm just here to learn.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now