?
Solved

Stop program from executing on domain computers

Posted on 2006-10-24
3
Medium Priority
?
208 Views
Last Modified: 2010-04-18
I am looking for a way to specify executables that cannot be run on the domain machines (for example, run.exe).  I am not sure if there is any way to do this, but it would be best if it could be disabled based on the .exe signature, and not the filename.  Does anyone know of any way this could be done?

I am essentially looking for a way to disallow some select games which students are playing that are very inappropriate for school.  Thanks.
0
Comment
Question by:stripslashes
  • 2
3 Comments
 
LVL 38

Accepted Solution

by:
Shift-3 earned 1500 total points
ID: 17796409
Software Restriction Policies can be used for this.  Microsoft's instructions are here:
http://support.microsoft.com/kb/324036

You would probably want to create a default security level of Unrestricted and then create exceptions for the games based on hash rules.

Be sure to test these policies thoroughly before using them in a production environment, as they can cause major problems if configured incorrectly.
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17797410
Was there something unsatisfactory about this answer?
0
 

Author Comment

by:stripslashes
ID: 17800505
No; I accepted it.  It was a good answer.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question