Shared Computer Toolkit - Software Restrictions

[Rodrigo Lopez Negrete]

Hello,

I have a small problem with software restrictions... Is there any way
to personalize which folders get restricted, and which don't? I have a
program install in the C: drive, but not in the program files, or
windows folder.

I was hoping not to reinstall the software to the program files folder.
Instead is there a way to maybe add a line to the <user>.xml file, and
remove restrictions to that particular folder??

Thanks all
Rodrigo

 

[Steven L Umbach]

I am not sure but tend to doubt it. If using XP Pro you have finer control
over SRP via Local Security Policy. I suggest that you also post in the
Microsoft.public.windows.sharedaccess newsgroup. --- Steve

 

[Rodrigo Lopez Negrete]

Ok... so I figured it out... At least I think so, and it worked so
far... The program I had that needed to be executed is matlab. It was
installed in the folder 'C:\MATLAB7p1\'. What I did so as not to
reinstall the program, was to add a line in the restrict.xml file (at
c:\Program Files\Microsoft Shared Computer Toolkit\xml\). At the
section that starts with:

<section id="SRPSection" name="Software Restrictions"
type="allrestrictions" _locID="SRPSection">

I added the following line below the one for the *.lnk

<poke resid="chkBlockAll"
regkey="Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{00000000-0000-0000-0001-000000000004}\ItemData"
type="REG_EXPAND_SZ" on="C:\MATLAB7p1" off=""
delete="off">C:\MATLAB7p1</poke>

Note that it has a 4 at the end of the Paths\{0000...04}\ItemData ....
This #4 --> 4}\ItemData

The line *.lnk has a 3....

After adding the line, execute the restrictions tool (start>All
Programs>Shared Computer Toolkit>User Restrictions), or step 5 of
Getting Started. There you should reaply the software restrictions.
Click apply, then ok... and that should do it....

Another way to do this could be to add the above line to the
User.<username>.xml file in the same section, and use the Restrict.wsf
script....

I hope this helps someone else....

--Rodrigo