how to prohibit renaming *exe files?

how to prohibit renaming *exe files?
MirceyhunAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Krzysztof PytkoSenior Active Directory EngineerCommented:
The only one native solution for me is setting NTFS permission to Read&Execute instead of Modify of that/those file(s)
There is no policy for that, only NTFS permissions settings

Maybe some 3rd party software but I didn't hear anything about that.

Regards,
Krzysztof
0
abbrightCommented:
Users with administrative permissions are able to change all filenames on a windows computer. To prevent this you need to remove the administrator permissions for those that are not supposed to be able to do it.
0
MirceyhunAuthor Commented:
users can change file names also...
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

Krzysztof PytkoSenior Active Directory EngineerCommented:
Because of NTFS permissions (security tab of folder/file) :) You need to change their rights to folders/files :)

Krzysztof
0
MirceyhunAuthor Commented:
can i do it from active directory (group policy)?
or i must do it in every 400 workstation manualy? :)
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
Are those Folders/Files in the same path on each client?
If so, you can try using GPO in Computer Configuration -> Windows Settings -> Security Settings -> File System

Add there file or folder and set up security tab as you wish

Krzysztof
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
abbrightCommented:
It all depends where those exe files are stored. If these are installed applications which usually lie under c:\program files, these can by default only be renamed by administrators (and maybe powerusers). exe-files stored in users' homedirectories likely can be renamed by users as they usually have full access to their directories.
0
pankusareenCommented:
0
MirceyhunAuthor Commented:
thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.