Prev: Active Directory keeps stopping
Next: DCDiag Errors
From: Ruphus Elderbeer Ruphus on 14 Jan 2007 02:30
I work at a school. Many of the students are using Firefox to get around the
web filter proxy that IE uses to block non-educational/adult sites. I was
wondering if there was any way to block the program "Firefox.exe" from
running on the Windows XP client computers? Can it be done with group
policy's? I am in a Windows 2000 Active Directory to Windows XP environment.
From: Herb Martin on 14 Jan 2007 07:41

"Ruphus Elderbeer" <Ruphus Elderbeer(a)discussions.microsoft.com> wrote in
message news:D254F6E9-0452-4326-BF19-998B1B927842(a)microsoft.com...
>I work at a school. Many of the students are using Firefox to get around
>the
> web filter proxy that IE uses to block non-educational/adult sites. I was
> wondering if there was any way to block the program "Firefox.exe" from
> running on the Windows XP client computers? Can it be done with group
> policy's? I am in a Windows 2000 Active Directory to Windows XP
> environment.

Yes.

The subarea of Group Policy (in Computer->Windows Settings->Security) is:

Software Restriction Policies

Software Restriction Policies allow you to block (or allow) programs by
several
criteria or rules, including:

Hash-A cryptographic fingerprint of the file
Certificate-A software publisher certificate used to digitally sign a
file
Path-The local or universal naming convention (UNC) path of where the
file is stored.
Zone-Internet Zone

"Path" is usually the easiest to understand and get started using.

Take a look, ask if you need more help, and/or search Google for:

[ "Software Restriction Policies" site:microsoft.com ]

One trick is to only allow software to run from selected locations,
e.g., Program Files and Windows directory BUT disallow users from
writing to those areas. This may not be perfect but goes a long way
to preventing unwanted programs from running.

Be sure to test carefully because you can easily make a system nearly
unusable.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


 | 
Pages: 1
Prev: Active Directory keeps stopping
Next: DCDiag Errors