Restrict access to certain .EXE's

[Kevin Lee]

I'am trying to deny access to certain .exe's. I understand
it can be done, through MMC in a GPO. I just can't find
where.

Thanks in advance.

 

[Arild Bakken]

Create a new GPO on the OU where you have the users you want to restrict.
Then look under:

User Configuration/Administrative Templates/System

You'll se a setting called "Run only allowed programs". Please note that the
restriction only applies to starting apps from Explorer, and Task manager
etc. Running the apps from scripts, or from other programs that allow you to
spawn processes will still work.

Arild