Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

how to prohibit renaming *exe files?

Posted on 2011-02-21
9
Medium Priority
?
1,091 Views
Last Modified: 2012-05-11
how to prohibit renaming *exe files?
0
Comment
Question by:Mirceyhun
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34941512
The only one native solution for me is setting NTFS permission to Read&Execute instead of Modify of that/those file(s)
There is no policy for that, only NTFS permissions settings

Maybe some 3rd party software but I didn't hear anything about that.

Regards,
Krzysztof
0
 
LVL 10

Expert Comment

by:abbright
ID: 34941516
Users with administrative permissions are able to change all filenames on a windows computer. To prevent this you need to remove the administrator permissions for those that are not supposed to be able to do it.
0
 

Author Comment

by:Mirceyhun
ID: 34941650
users can change file names also...
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34941659
Because of NTFS permissions (security tab of folder/file) :) You need to change their rights to folders/files :)

Krzysztof
0
 

Author Comment

by:Mirceyhun
ID: 34941850
can i do it from active directory (group policy)?
or i must do it in every 400 workstation manualy? :)
0
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 2000 total points
ID: 34941873
Are those Folders/Files in the same path on each client?
If so, you can try using GPO in Computer Configuration -> Windows Settings -> Security Settings -> File System

Add there file or folder and set up security tab as you wish

Krzysztof
0
 
LVL 10

Expert Comment

by:abbright
ID: 34942031
It all depends where those exe files are stored. If these are installed applications which usually lie under c:\program files, these can by default only be renamed by administrators (and maybe powerusers). exe-files stored in users' homedirectories likely can be renamed by users as they usually have full access to their directories.
0
 
LVL 9

Expert Comment

by:pankusareen
ID: 34950205
0
 

Author Closing Comment

by:Mirceyhun
ID: 34958161
thanks
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
An overview on how to enroll an hourly employee into the employee database and how to give them access into the clock in terminal.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question