Software Restriction not working

[Citimouse]

Hi All,

I would like to create a software restriction rule to prevent ZoneAlarm from
running in the domain. However, I have tried putting this rule in GPO or in
the Domain Security Policy and it does nto work.

This is what I have done.

In the software restriction policies (either in GPO or Domain Security
Policy), Additional Rules, I add a new Path rule. In the path, I specify
c:\program files\zone labs\zonealarm\zlclient.exe. Security Level is
Disallowed.

Am I doing the right thing? Zone Alarm is not installed in the Windows 2003
domain controller.

Any help is appreciated.

Thank you.

 

[Guest]

You can try User Config\Administrative Templates\System\Don't run specified
Windows applications

"Prevents Windows from running the programs you specify in this setting. If
you enable this setting, users cannot run programs that you add to the list
of disallowed applications. This setting only prevents users from running
programs that are started by the Windows Explorer process. It does not
prevent users from running programs, such as Task Manager, that are started
by the system process or by other processes. Also, if you permit users to
gain access to the command prompt, Cmd.exe, this setting does not prevent
them from starting programs in the command window that they are not permitted
to start by using Windows Explorer. Note: To create a list of disallowed
applications, click Show, click Add, and then enter the application
executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)."

BR,
Denis