Paul,
Microsoft Office uses many resouce files, but the main executables for MS Office
apps are things like winword.exe,...
If you look in the header files for URL & check out their interfaces then you
have things like URLMON.DLL & URLMON.LIB, which are used for MS Office
applications
Here are a few articles that explain a little further, but are not 100%
suitable:
References to URLMON.DLL...
http://support.microsoft.com/kb/838028
This goes into hyperlinks in great detail, but is more a programming reference:
http://msdn2.microsoft.com/en-us/library/aa767919.aspx
Another simple file for you to read:
http://support.microsoft.com/kb/257464
But as you said in your previous post the DLL files are unrestricted so you
cannot include that file anyway
-----------------
There is a registry key that will allow you to run just those particular files &
none other. Adding to that key is basically what that application is doing for
you:
Restrict Running Applications
Current User:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Di
sallowRun
All Users:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\D
isallowRun
Note:
You will probably need to create the key under POLICIES:
Example:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
Right-click the POLICIES KEY (left pane) | NEW | KEY & type EXPLORER
Produces:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Now, right-click the EXPLORER KEY (just created in the left pane) | NEW | KEY &
type DisallowRun
Now, highlight the 'DisallowRun' key in the left pane & create the following in
the right pane:
Create new STRING & name it 1 (incrementing each time)
Example:
1 "MyDisallowedExe.exe"
2 "AnotherDisallowedFile.exe"
3 ...
Now, go back to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Highlight the EXPLORER key in the left pane & in the right pane
Create a new DWORD value 'DisallowRun' & set it to 1
If you have followed these registry instructions correctly it should look like
what is between the dashes below when you export the POLICIES key:
========================================================================
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"DisallowRun"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\D
isallowRun]
"1"="MyDisallowedExe.exe"
"2"="AnotherDisallowedFile.exe"
========================================================================
There is another registry key that can be created like above that will RESTRICT
the applications that a user can run:
It uses exactly the same keys to POLICIES\EXPLORER as before but you create a
new key RestrictRun instead of DisallowRun:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Re
strictRun
1 "MyDisallowedExe.exe"
2 "AnotherDisallowedFile.exe"
3 ...
In this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Create a new DWORD (right pane)
RestrictRun & change value to 1
If you export the registry key from POLICIES it will look like this:
========================================================================
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"RestrictRun"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\R
estrictRun]
"1"="MyDisallowedExe.exe"
"2"="AnotherDisallowedFile.exe"
========================================================================