Script Logic

Posted on 2005-03-18
Medium Priority
Last Modified: 2012-08-13
Can anyone tell me how in ScriptLogic to push out a script to stop users from downloading (or running) executable files on their computers from the internet?
Question by:abolla
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 18

Expert Comment

ID: 13575206
Well if a user doesn't have admin rights then they can't install most programs...so the best way to prevent them running most .exe files is to make sure your users are not administrators on their machines. If they are admins then they have full control over the machine.

I don't know about scripts....but my personal opinion is that if a user has admin rights it is very hard if not impossible to stop them from downloading and installing programs. You can use group policy to restrict downloads and installs, but this can get tricky and users can often find ways around it.

The big thing on this one is to take away local admin rights.....
LVL 22

Expert Comment

ID: 13575706
There are other ways to prevent users downloading executables. These include http/ftp proxies that block executables. Email scanners can be configured to strip away any executables attached.

Regardless of how you decide to do this, the best starting point is to get a good sensible corporate IT policy in place forbidding the download of executables. Once that's done, any blocking of executables will not cause you problems as you will be seen to be carrying out the will of the company, rather than being a 'spoil-sport'!
LVL 15

Expert Comment

ID: 13576083
Sounds like you are looking for "Software Restriction Policies"  Do a google on it and you will find lots of info.  Here's one...


Accepted Solution

ronkupper earned 1500 total points
ID: 13609779
1.You could disable Download Capabilites in IExplorer -

If you need you could also do it from Group Policy to apply the settigns on multiple computers.
(you could also hide the Advanced tab so users wont be abloe to change that setting)

2. (A very interesting approach) You can deploy "TrustNoExe" to explicitly define the allowed applications to be run by users.
More info here -

(Its a genius tool, and Free!)

Expert Comment

ID: 13664594
Glad I could help!

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question