How-to restrict (blacklist) applications from being executed using GPO

  • Thread starter Thread starter Dre
  • Start date Start date
D

Dre

I want to restrict the employees from using msn messenger
msnmsgr.exe. Is it possible with Win2K adv server security
policies ? I have read it is on win 2003 server, what
about win2k. Any 3rd party software to reach the above
goal ?

thanks for any input

Dre.
 
XP Pro and W2003 can use Software Restriction Policies which are very
powerful lockdown tools and XP Pro domain members can also have SRP enforced
on them via Group Policy machine configuration by managing those setings
from an XP Pro domain member using mmc/Group Policy snapin. For W2K
computers, about the best you can do natively is to populate the disallowed
Windows Applications list as described in the KB link below. You may also
want to add install.exe and setup.exe to the list. This list, while helpful,
can be bypassed if a user renames the executable. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
 
Thank you Steve !

-----Original Message-----
XP Pro and W2003 can use Software Restriction Policies which are very
powerful lockdown tools and XP Pro domain members can also have SRP enforced
on them via Group Policy machine configuration by managing those setings
from an XP Pro domain member using mmc/Group Policy snapin. For W2K
computers, about the best you can do natively is to populate the disallowed
Windows Applications list as described in the KB link below. You may also
want to add install.exe and setup.exe to the list. This list, while helpful,
can be bypassed if a user renames the executable. --- Steve
us;323525




.
Click to expand...
 
Back
Top