Solved

Stop program from executing on domain computers

Posted on 2006-10-24
3
205 Views
Last Modified: 2010-04-18
I am looking for a way to specify executables that cannot be run on the domain machines (for example, run.exe).  I am not sure if there is any way to do this, but it would be best if it could be disabled based on the .exe signature, and not the filename.  Does anyone know of any way this could be done?

I am essentially looking for a way to disallow some select games which students are playing that are very inappropriate for school.  Thanks.
0
Comment
Question by:stripslashes
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 38

Accepted Solution

by:
Shift-3 earned 500 total points
ID: 17796409
Software Restriction Policies can be used for this.  Microsoft's instructions are here:
http://support.microsoft.com/kb/324036

You would probably want to create a default security level of Unrestricted and then create exceptions for the games based on hash rules.

Be sure to test these policies thoroughly before using them in a production environment, as they can cause major problems if configured incorrectly.
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17797410
Was there something unsatisfactory about this answer?
0
 

Author Comment

by:stripslashes
ID: 17800505
No; I accepted it.  It was a good answer.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question