Renaming exe files

Posted on 2006-05-01
Last Modified: 2013-12-04
Two issues at the school I do tech support for:

1. How to stop or find out when students rename exe files to somthing else so I cant do a search for *.exe? (in their home folder) Or how do I stop execute permission on their home folder without affecting normal work? They also tend to delete the games before I do my weekly check as I am only there two times a week.

2. How to stop students installing software on local machines thru AD. They go to a web site and dowload setup (EG arcadeGamesSetup.exe) and install it. How do I stop this?
Question by:TawVb
    LVL 15

    Accepted Solution

    In group policy use software restriction policies to allow only the software you want. This will solve both problems for you
    That link is for the local security policy on XP but it is identical in group policy
    LVL 23

    Expert Comment

    hi there

    first of all creat a group for all the students and assign them a default profile or a mandatory profile. disable write access to c: drive and then assign them only permissions on their mydocuments directory. so they will not be able to change or delete any files.  And also restrict their access to the registry as any game files whether trial or freeware will make entries in registry and when they try to install those games will not be installed as they dont have access to the registry and also they can create any other folders in the programe files directory.
    pls read this group policy thig and also refer to the second link which is very specific to your requirements


    Author Comment

    Wingatesl: This is a school that has a lot of software and is would be very hard to put every application into the list.

    bhanukir: How do I stop execute (only) permission to their home folder?

    I still need to know how to find an exe that has been re-named. Thanks

    LVL 23

    Assisted Solution

    hi there

    what best u can do is enable the domain security policy in the domain security policy set the audit object access to enable. right click the folders u want to audit and on the security tab u can specify the audit this folder.  So this would let u  know what all files have been renamed.

    Next in the group policy in the active directory in the software installtion policy disable installation of software to all users except admin this would help a lot.

    for details u can utilise the windows help file or can revert back i will give u step by step detail

    this is well documented in the windows XP professional in the help and support area.


    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
    As a Mac user and former AppleCare AHA & Senior Advisor, I'm constantly bombarded with questions about Macs and if they need Antivirus. This short article is my response to those questions.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now