how to prohibit renaming *exe files?

how to prohibit renaming *exe files?
MirceyhunAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Krzysztof PytkoSenior Active Directory EngineerCommented:
The only one native solution for me is setting NTFS permission to Read&Execute instead of Modify of that/those file(s)
There is no policy for that, only NTFS permissions settings

Maybe some 3rd party software but I didn't hear anything about that.

Regards,
Krzysztof
0
abbrightCommented:
Users with administrative permissions are able to change all filenames on a windows computer. To prevent this you need to remove the administrator permissions for those that are not supposed to be able to do it.
0
MirceyhunAuthor Commented:
users can change file names also...
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Krzysztof PytkoSenior Active Directory EngineerCommented:
Because of NTFS permissions (security tab of folder/file) :) You need to change their rights to folders/files :)

Krzysztof
0
MirceyhunAuthor Commented:
can i do it from active directory (group policy)?
or i must do it in every 400 workstation manualy? :)
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
Are those Folders/Files in the same path on each client?
If so, you can try using GPO in Computer Configuration -> Windows Settings -> Security Settings -> File System

Add there file or folder and set up security tab as you wish

Krzysztof
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
abbrightCommented:
It all depends where those exe files are stored. If these are installed applications which usually lie under c:\program files, these can by default only be renamed by administrators (and maybe powerusers). exe-files stored in users' homedirectories likely can be renamed by users as they usually have full access to their directories.
0
pankusareenCommented:
0
MirceyhunAuthor Commented:
thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.