PC Review


Reply
Thread Tools Rate Thread

Disallow executable file creation

 
 
Rodrigo Lopez Negrete
Guest
Posts: n/a
 
      3rd Feb 2006
Hello,

I'm working for a school's computer lab, and I have a problem with
users that have been creating executable files by downloading
*.(exe,com,vbs,etc), or creating batch files (*.bat). I want to
disallow this if possible so they stop installing software, such as
google talk that doesn't use the microsoft installer. The computers
have Windows XP Professional, and we do not have a domain or WinServer,
therefore all policies will be local. Is this possible without
installing some other software?

Thanks all,
Rodrigo

 
Reply With Quote
 
 
 
 
Steven L Umbach
Guest
Posts: n/a
 
      3rd Feb 2006
You can do that with Software Restriction Policies that can be accessed via
Local Security Policy. For that to be effective the users must not be local
administrators or they can undo restrictions if they know how to and want
to. You also may want to look at the free Shared Computer Toolkit that is
excellent at restricting user accounts and uses Software Restriction Policy
though in a generic way. The links below explain more and FYI by default
shortcuts such as those on the desktop are considered as restricted by SRP
and allowances need to be made for such in your hash/path rules or file
types considered restricted. --- Steve

http://www.microsoft.com/technet/pro.../rstrplcy.mspx
--- SRP
http://www.microsoft.com/windowsxp/s.../overview.mspx --- Shared
Computer Toolkit which requires SP2

"Rodrigo Lopez Negrete" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
>
> I'm working for a school's computer lab, and I have a problem with
> users that have been creating executable files by downloading
> *.(exe,com,vbs,etc), or creating batch files (*.bat). I want to
> disallow this if possible so they stop installing software, such as
> google talk that doesn't use the microsoft installer. The computers
> have Windows XP Professional, and we do not have a domain or WinServer,
> therefore all policies will be local. Is this possible without
> installing some other software?
>
> Thanks all,
> Rodrigo
>



 
Reply With Quote
 
Rodrigo Lopez Negrete
Guest
Posts: n/a
 
      4th Feb 2006
Hey Steve,

Thanks for the answer! As it seems the best solution for me was the
Shared Computer Toolkit.

Thanks again..

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Disallow download of certain file type sumguyovrthar Microsoft ASP .NET 5 10th May 2007 11:11 PM
Disallow PST file Kevin Microsoft Outlook 1 4th May 2007 10:26 AM
How to get creation DateTime of the currently running executable? =?Utf-8?B?ZWxlbmE=?= Microsoft Dot NET Compact Framework 2 27th Jul 2005 02:00 PM
Can I disallow the user to open a file if he disable the macro while the file is opening? Robin Microsoft Excel Programming 10 7th Feb 2005 09:40 AM
Disallow delete file but can rename filename Pleo Microsoft Windows 2000 1 27th Sep 2003 12:51 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 09:41 PM.