Solved

Group Policy to Prevent Downloading of Exe Files.

Posted on 2006-06-12
6
5,976 Views
Last Modified: 2009-03-27
I am looking for a group policy setting that will prevent users from downloading exe files from the internet.  While our current group policy prevents them from installing programs I would also like to be able to prevent them from downloading any executable files.

Many thanks for any assistance that you can provide.

Regards

Sharon Clift
Bird Semple Solicitors
0
Comment
Question by:Birdsemple
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16884603
this isnt an option with group policy, its more of a proxy solution
0
 
LVL 16

Accepted Solution

by:
mdiglio earned 250 total points
ID: 16885186
Hello,
This is not an exact fit for your situation but you can disable IE from downloading files altogether.

User configuration > windows settings > Internet Explorer Maintenance > security >
open 'security Zones and Content Ratings > under 'security zones and privacy' choose
'import the current security zones and privacy settings > click the 'Modify Settings' button.

Choose 'Internet' zone > custom level > scroll down to the 'downloads' section > set 'file download' to disable

If you have any sites in your trusted lists then you will have to edit the trusted sites zone as well as the internet zone

Link this group policy to an OU that contains your users

here is the registry edit for this setting:
Disable File Download in Internet Explorer
http://www.winguides.com/registry/display.php/901/
0
 

Author Comment

by:Birdsemple
ID: 16902523
Many thanks for this.  I knew there was some way to restrict IE from downloading but just could not find where.

0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 16

Expert Comment

by:mdiglio
ID: 16902725
Glad it worked for you!
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16907855
i didnt realise you wanted to block all! glad all is well
0
 

Author Comment

by:Birdsemple
ID: 16909548
If possible I would have preferred to just block exe files, however since that isn’t possible blocking all downloads might be the way to go.  

Thanks for your assistance
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question