how to disallow executing EXE file and disallow downloading EXE from internet

Hi expert,
I have a requirement to disallow EXECUTING exe file which means whenever user try to install any exe file, it'll be denied.
But User should be able to access other applications like microsoft office and any other applications installed in their system.
And I would like to disallow downloading exe from internet also.
I want to do above 2 things for his PC only without doing anything in firewall
Could you advise how can it be done?
Thanks,
Rgds
LVL 4
bominthuAsked:
Who is Participating?
 
johnb6767Connect With a Mentor Commented:
Run only allowed Windows applications
http://msdn.microsoft.com/en-us/library/ms811966.aspx

This will stop everything EXCEPT your standard apps you specify. As for blocking the downloads of .exe files, not sure of a method JUST for .EXE files......

Disable File Download in Internet Explorer
http://www.pctools.com/guides/registry/detail/901/


You would need a proxy or other filter for filetypes I am fairly certain.....

Have you looked at OpenDNS?

OpenDNS Web Based Security
http://www.opendns.com/
0
 
Kent DyerIT Security Analyst SeniorCommented:
Probably the easiest way is to use a group policy to do this.

If you are not on a domain, just run gpedi.msc

HTH,

Kent
0
 
bominthuAuthor Commented:
From gpedit available option, will it fullfil my requiremenrs above?
Rgds
0
 
Kent DyerIT Security Analyst SeniorCommented:
Looking at #13 here should cover it.

http://www.gpanswers.com/resources/gp-faqs.html

HTH,

Kent
0
 
johnb6767Commented:
Update?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.