Re: Prevent Application from home directory

From: Dana Huang [MSFT] (jinhuang_at_online.microsoft.com)
Date: 04/30/03


Date: Tue, 29 Apr 2003 15:23:46 -0700


Yes you can use SRP (software restriction policy) disallowed path rule to
restrict your applications under %HOMEDRIVE%%HOMEPATH%

--
Dana Huang [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Pete" <pleasemail@within-newsgroup.com> wrote in message
news:b8med1$evu$1@titan.btinternet.com...
> Steven,
>
> Thanks for the response, I'll have a look at the site.
>
> Pete.
>
> "Steven L Umbach" <n9rou@attbi.com> wrote in message
> news:%3lra.125908$gK.230202@rwcrnsc52.ops.asp.att.net...
> >            I believe that would be next to impossible if they have
> > read/execute permissions. However Windows XP has some fairly powerful
> group
> > policy settings that can prevent users from running restricted
> applications
> > or restricting them to certain applications.  You could also consider
> using
> > disk quotas (based on ownership) to restrict users from having enough
> space
> > to install certain applications or modifying ntfs permissions on their
> > folder to prevent them from creating subfolders to make it more
difficult
> > for them to install applications there.   --- Steve
> >
> > http://www.jsiinc.com/SUBJ/tip4500/rh4519.htm
> >
> > "Pete" <pleasemail@within-newsgroup.com> wrote in message
> > news:b8jcsk$sct$1@hercules.btinternet.com...
> > > Apologies in advance, as I have also sent this to
> win2000.active_directory
> > > as I wasn't sure which one to settle for.
> > >
> > > I'm in the process of testing a W2000 server with XP workstation.
> > >
> > > Is it possible to create a GPO that will prevent users from running an
> > > application from their home directory, or will I have to resort to a
> third
> > > party app.  Budget is a big factor so a policy would be better for us.
> > >
> > > Thanks in advance
> > >
> > > Pete.
> > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Software Restrictions
    ... When I denied Project Users Read & Apply Policy, ... user could not access any of the restricted applications to include Project. ... >>I want to implement 2 GPOs to restrict certain software. ... >> be applied to the Domain Users security group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Software Restrictions
    ... > my test user could access all restricted applications to include Project. ... > It seems as though the first policy took affect and skipped the second ... >>>I want to implement 2 GPOs to restrict certain software. ...
    (microsoft.public.windows.server.active_directory)
  • Re: XPPro : Restrict the programs a user can run
    ... this option only controls whether those applications can be started by the ... Local Computer Policy ... This setting only prevents users from running programs that are started by the Windows Explorer process. ... >> restrict users to allow ONLY the specified programs to be run ...
    (microsoft.public.windowsxp.security_admin)
  • Securing a standalone workstation
    ... Documents folder. ... but to fully acheive this hiding breaks the applications on ... to Windows Explorer that let you restrict drive access? ...
    (microsoft.public.security)
  • Re: Prohibit users adjusting screen resolution
    ... from downloading files to the hard disk. ... The partner to DisallowRun is Restrict Run. ... specify applications that are allowed to run, by name, and no others. ...
    (microsoft.public.windowsxp.security_admin)