Thread: Software Restriction Policies
2007-02-23, 21:54 #1
- Join Date
- Jan 2001
- Tacoma, Washington, USA
- Thanked 1 Time in 1 Post
Software Restriction Policies
I need a little help with a Group Policy Object I created fro Software Restrictions. I create it to better lockdown software on some new Windows XP computers. Here's what I've got:
I created an OU under Resources for said machines and created a new GPO for the OU. I create a new policy under Computer Configuration>Windows Settings>Security Settings>Software Restriction Policies. Security Level is Disallowed and Enforcement is all except local administrator. Under Additional Rules I set up two Path rules for unrestricted access to anything located inside the %WINDR% and %PROGRAMFILES%.
When I log into a computer inside this OU as a regular user, I can execute files inside those folders, but I'm getting an error if I use a shortcut to said executable. For example, I have a program inside %WINDR% named etrnview.exe. I get a restricted error if I try to run it using the shortcut located at Cocuments and SettingsAll UsersStart MenuProgramsE-Transcript Viewer.lnk. If I add a Path to that shortcut I can use it.
So, if I've got this straight, I either need to add numerous Paths to the GPO for all shortcuts (lnk) to files. Or unrestrict all LNK file types. Wouldn't the latter be a bad idea? Am I wrong or is there another way around this problem?
I'd sure like to get off on a better start with these new computers. A handful of users have ignored the written "do not install software" policies and done it anyway.Daisy
Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!
+ Get this BONUS — free!
Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!