will Group Policy allow me to block viruses from executing?

[G]

I just posted this question on ms.pub.win.group_policy, but I noticed this
group has much more activity, so I apologize for the double post.

My question is this. If I use Group Policies to only allow a small group of
programs to run in my network.....would this stop all or most viruses from
executing? I am pretty sure that any .exe virus would not be able to run,
but what about .com viruses or the ones that come with other executable
extensions? (not including word, excel, etc. macro viruses...I understand it
wouldnt block those).

Does any of what I am saying make any sense? I dont know much about GPO.
thanks,
-g

 

[Chriss3]

Hello, You are correct, you can block and prevent all file types you want.

How Windows Server 2003's Software Restriction Policies Improve Security:
http://www.windowsecurity.com/articles/windows_2003_restriction_policies_security.html

Using Software Restriction Policies to Protect Against Unauthorized
Software:
http://www.microsoft.com/windowsxp/pro/techinfo/administration/restrictionpolicies/default.asp

Best practices:
http://www.microsoft.com/technet/tr...indowsserver2003/proddocs/standard/SRP_BP.asp

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[G]

Thanks Christoffer,
I will start reading these articles inmediately. Looks like exactly what I
was looking for.

-g