disable user from running .EXE files

H

hardc0re

Gawd
Joined
Sep 19, 2006
Messages
869
Hi I have a windowsXP Pro machine with 2 accounts 1 admin and 1 user that has guest privileges. Is there any way of applying a policy that would prevent the user from running .EXE files?
 
Seriously, I believe windows lives on executables. What are you hoping to accomplish? Maybe there is a better way to solve it.
 
And if your not in a Windows domain environment you can use local policy and file permissions to do this as well. But I don't see the point in restricting access to all .exe files. Like I said, the user will not be able to do anything. Now if there are specific things you want to allow or block access to thats different. If there are only a few applications you want to block access to it might be easier to do this through file permissions since the account in question is a member of the guest users group.
 
sorry for a crap first post lol it was 3 am.

let me clarify, I want to set up some safe applications and anything else off that list cannot be run. Any way to do that from group policy for just 1 user?
 
If you are in a domain environment:

Create a new OU, put that user in the OU, create a new GPO, assign it to the OU. In the GPO, enable software restrictions and set the default behavior to deny. Create a list of approved applications. There are several system processes that user must be able to execute in oder to log in. This takes a lot of troubleshooting to make sure it works properly.

http://support.microsoft.com/kb/324036
 
hardc0re said:
sorry for a crap first post lol it was 3 am.

let me clarify, I want to set up some safe applications and anything else off that list cannot be run. Any way to do that from group policy for just 1 user?
Click to expand...

Let me just make sure you have one thing for sure:

You will want to be able to run explorer.exe no matter what. Otherwise, you are shell less.

-randyc
 
from what I read on microsoft's site, software installation restriction can only be done if im running a domain controller. Are there any other ways to prevent installation?
 
You must log in or register to reply here.
Back
Top