Use Group Policy to disble IE but users can rename executable

[Dawn Bouton]

I have set a group policy on a container to disable running Internet
Explorer from being run by our students who lose their internet
privileges. However they are able to rename the iexplore.exe to
another allowed exe and get to the internet that way. Any
suggestions? I looked around group policy but didn't find anything.
Thanks in advance for any help.

Dawn

 

[Richard McCall [MSFT]]

You can use the hash option to prevent them from renaming exe to gain access

310791 Description of the Software Restriction Policies in Windows XP
http://support.microsoft.com/?id=310791

 

[Cary Shultz [A.D. MVP]]

Dawn,

In addition to what Richard suggested, you can use GPO to prevent your
students from connecting to the Internet. Al you would need to do is to put
those students in an OU and create the Policy and link it to that OU.
Simply give them a fake proxy address and enable the setting that disallows
them from changing it. Remember, though, that GPOs work only on WIN2000
clients and WINXP clients.

HTH,

Cary

 

[Dawn Bouton]

That is exactly what I did and it works great - thank you

Dawn