How can you stop renaming application files?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

In Active Dircetory the software allow list does not let you use a pathe so
that only that application such iexplore, only runs from C:\Program
Files\Internet Explorer. User know that if you change firefoxsetup.exe to
iexplore.exe the setup program will install. Once it install, you can change
the firefox.exe to iexplore.exe and the program will run.
With all the install set to disable domain user are still able to install
and run the software. This has been a problem since NT server 3.0.
Any sugestions?
 
AnodNoodles said:
In Active Dircetory the software allow list does not let you use a pathe so
that only that application such iexplore, only runs from C:\Program
Files\Internet Explorer. User know that if you change firefoxsetup.exe to
iexplore.exe the setup program will install. Once it install, you can change
the firefox.exe to iexplore.exe and the program will run.
With all the install set to disable domain user are still able to install
and run the software. This has been a problem since NT server 3.0.
Any sugestions?
Click to expand...

I think that you overcooked your Noodles!
Just let it install in the default directory.
If you are asking this to stop employees from installing "whatever" no
matter what you do it can and will be bypassed.
 
In the list of "Run only allowed Windows applications" only the appicatation
name is listed; i.e, winword.exe, iexplore.exe, jbuilder.exe. Thus allowing
students/domain user to rename files i.e. firefox.exe to iexplore.exe. How
can this be stop? If you can put in the full path for the application to run
i.e. C:\Program Files\Internet Explorer\iexplore.exe. Than if the user rename
the file it still can not run since the path is different.
 
Back
Top