Solved

Stop program from executing on domain computers

Posted on 2006-10-24
3
201 Views
Last Modified: 2010-04-18
I am looking for a way to specify executables that cannot be run on the domain machines (for example, run.exe).  I am not sure if there is any way to do this, but it would be best if it could be disabled based on the .exe signature, and not the filename.  Does anyone know of any way this could be done?

I am essentially looking for a way to disallow some select games which students are playing that are very inappropriate for school.  Thanks.
0
Comment
Question by:stripslashes
  • 2
3 Comments
 
LVL 38

Accepted Solution

by:
Shift-3 earned 500 total points
ID: 17796409
Software Restriction Policies can be used for this.  Microsoft's instructions are here:
http://support.microsoft.com/kb/324036

You would probably want to create a default security level of Unrestricted and then create exceptions for the games based on hash rules.

Be sure to test these policies thoroughly before using them in a production environment, as they can cause major problems if configured incorrectly.
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17797410
Was there something unsatisfactory about this answer?
0
 

Author Comment

by:stripslashes
ID: 17800505
No; I accepted it.  It was a good answer.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now