Locking out Exectuables

[myanimator]

Hello...
I mantain a series of machines in an educational setting. The students are told not to download/run/install executable files. We have made the executables appear invisible on their mapped drives via UNIX as it is a Sun server. However I want to be able to lock out all executable files from the D: drive, which is the only drive they can download to.

Any ideas?

thanks :)

[mcintyreb]

Check checking the link:
http://www.jsiinc.com/suba/tip0000/rh0050.htm
The part about the RestrictRun registry key should help.

[myanimator]

Thanks man looks like that will work :)

[RWSchlatter]

Hi - don't forget to check the Registry Guide on this site when you are looking for such tweaks !
you ill find (the same?) answer here at:
<a target="_blank" href=http://www.winguides.com/registry/display.php/113/>http://www.winguides.com/registry/display.php/113/</a>
Note: you will have to list all permitted apps, don't forget anything, and take care you do not lock out admins fromtheir own tools.

______________
Regards - Richard

[myanimator]

Richard thanx much for the input I did try looking through the site and didn't find anything. However after looking into this solution it turns out it really isn't a solution. It will be quite a pain to gather all the exes that we need to run so I am still looking for a solution to list the ones I don't want to run. Usually they are common ones like aim.exe, or winamp.exe, etc.

let me know if you have a solution for that one :)

[RWSchlatter]

this is Microsofts only way to set policies / restrictions from within Windows.

This problem has been discussed often, especially in the Registry discussion forum. The last post in following thread mentions a third party tool, maybe it is of some help in your case:
<a target="_blank" href=http://forums.winguides.com/showthreaded.php?Cat=&Board=secwin&Number=15066&page=&view=&sb=>http://forums.winguides.com/showthreaded.php?Cat=&Board=secwin&Number=15066&page=&view=&sb=</a>

______________
Regards - Richard