Thread: Software Restriction Policies
2007-02-23, 21:54 #1
- Join Date
- Jan 2001
- Tacoma, Washington, USA
- Thanked 1 Time in 1 Post
Software Restriction Policies
I need a little help with a Group Policy Object I created fro Software Restrictions. I create it to better lockdown software on some new Windows XP computers. Here's what I've got:
I created an OU under Resources for said machines and created a new GPO for the OU. I create a new policy under Computer Configuration>Windows Settings>Security Settings>Software Restriction Policies. Security Level is Disallowed and Enforcement is all except local administrator. Under Additional Rules I set up two Path rules for unrestricted access to anything located inside the %WINDR% and %PROGRAMFILES%.
When I log into a computer inside this OU as a regular user, I can execute files inside those folders, but I'm getting an error if I use a shortcut to said executable. For example, I have a program inside %WINDR% named etrnview.exe. I get a restricted error if I try to run it using the shortcut located at Cocuments and SettingsAll UsersStart MenuProgramsE-Transcript Viewer.lnk. If I add a Path to that shortcut I can use it.
So, if I've got this straight, I either need to add numerous Paths to the GPO for all shortcuts (lnk) to files. Or unrestrict all LNK file types. Wouldn't the latter be a bad idea? Am I wrong or is there another way around this problem?
I'd sure like to get off on a better start with these new computers. A handful of users have ignored the written "do not install software" policies and done it anyway.Daisy
Subscribe to our Windows Secrets Newsletter - It's Free!
Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!
+ Get this BONUS — free!
Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!