Software restriction

[Apollo]

Has anyone got Software restriction to work via GPO?
So far I have only configure a local policy via gpedit.msc and set the
default to allow software but prevent/disallow winmine.exe (minesweeper). I
have set the rule via hash and path method but neither works after gpupdate
/force or machine reboot. Advice please...

 

[Vincent Xu [MSFT]]

Hi,

Check following article:

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch
06.mspx

Hope it helps.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------

 

[Florian Frommherz]

Howdie Apollo!

Has anyone got Software restriction to work via GPO?
So far I have only configure a local policy via gpedit.msc and set the
default to allow software but prevent/disallow winmine.exe (minesweeper). I
have set the rule via hash and path method but neither works after gpupdate
/force or machine reboot. Advice please...

In addition to what Vincent posted: As you posted your issue in the
Windows 2000 Group Policy group, I'd like to mention that Software
Restriction Policies only work for Windows XP and Windows Server 2003
clients. Windows 2000 clients will just ignore the settings you make,
since Windows 2000 does not "contain" the needed Client Side Extension
for processing...

cheers,

Florian