Hi Darren,Even after removing the vbs and cmd extension. We can't run cmd files.
Let's assume even if starts working. it's not feasible to block all exe's as user may have to install some files or they may need some exe to run externally...
So using this method will be a problem for us...Also let me know why the script is not running even after removing the cmd and vbs extension...
Thx... On Wed, 23 Jul 2008 Deepu wrote :
Hi Darren,I have even tried the whitelist mode. But doing so blocks all exe and even it doesn't allow to run vbs (scripts) which are necessary to run.There may be some exe's which user should run.. So, allowing this policy doesnot works...Thanks... ------------------------------------------------------ On Wed, 23 Jul 2008 Darren Mar-Elia wrote :Deepak-Have you considered using Software Restriction Policy in whitelist mode? That is, set the default level to disallowed and then only allow a specifiedpre-approved set of executables? Darren -----Original Message-----From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] OnBehalf Of Deepu Sent: Wednesday, July 23, 2008 7:39 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Office Blockage... Hi Friends,I am in a great problem. I would really appreciate if anyone canhelp me at the earliest: Problem: I want to block some executables like access.exe, publisher.exe and communicator.exe using group policy.Now the problem is i can't use Software Restriction Policy using hash rule as the hash will change everytime microsoft patches orrelease service pack for office 2007.Secondly if i use Software Restriction Policy using path rule. The user can simply copy the exe to alternate location and can run theprogram with ease.So,i would really appreciate if anyone can help me to solve thisissue, as the user can't open the above mentioned exe from anywhere. I want to implement it using group policy. A custom ADM/ADMX will also work... Please guide me if possible... Waiting for your reply... Deepak Kumar... India... *********************** You can unsubscribe from gptalk by sending email togptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list areavailable at //www.freelists.org/archives/gptalk/ ************************ ***********************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/***********************************************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/************************
*********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************