block windows 2000 games

[Guest]

I need some help trying to block the use\not allow the build in games for
windows from being run. Since there is no uninstall for games on 2000pro
machines and I don't like the idea of deleting the exe.s I am hoping GP can
help me. I have tried to mess a little with software restrictions with
little or no luck. No luck using the: windows settings\security
settings\software restriction\new hash rule. I had a little luck with the
path rule but that could be bypassed by moving the exe. Any suggestions out
there. Thanks in advance.

 

[Simon Geary]

You can actually uninstall the games (and any other Windows components)
using Group Policy. Sysocmgr is a command line version of the Add\Remove
Programs utility. All you need to do is include a few lines in your logon or
startup script and the games will be automatically removed.
http://support.microsoft.com/kb/222444

 

[Guest]

Simon,
Thanks for the suggestion, one small problem, how can I use the kb article
you recommened with users in my domain that dont have admin rights on the
w2kpro workstation, most of my users have power user rights only. When
running Sysocmgr.exe I get an error saying: the application could not be
initialized.
thanks,
Mark

 

[lforbes]

I need some help trying to block the use\not allow the build in games
for windows from being run. Since there is no uninstall for games on
2000pro machines and I don’t like the idea of deleting the exe.s
I am hoping GP can help me. I have tried to mess a little with
software restrictions with little or no luck. No luck using the:
windows settings\security settings\software restriction\new hash rule.
I had a little luck with the path rule but that could be bypassed by
moving the exe. Any suggestions out there. Thanks in advance.

Hi,

The hash rule only works with Windows XP machines. You can use the GP
"prevent these applications from being run". You just put the app in
there, you don’t need the path.

However, What I did was create a batch file startup script with
xcacls.vbs that just removed read NFTS permissions access to the file
from Users. Eg. I set permissions to be "Administrators and System =
Full Control" but no one else.

I use Xcacls.vbs to set permissions a lot as a startup script. I have
hundreds of machines so everything has to be automated including
setting permissions.

Cheers,

Lara

 

[lforbes]

how can I use the kb article you recommened with users in my domain

that dont have admin rights on the w2kpro workstation

Use it as a startup script and assign it to the computers so they
uninstall them at restart. This is how I do everything. There is also
that "run as administrator" feature but I am not sure if you can do
that via command line.

Cheers,

Lara