Block files of a certain name.?

Question

Hi there,
I work for the IT department in a school building. We have the ability to prevent student users from executing files of a certain type (i.e. .bat), but there is a popular game going around on the network that has a .exe extension. We can't block the .exe extension or they wouldn't be able to do basic functions like open Internet Explorer, or even the taskbar for that matter because those are all .exe files as well. We would like to block the name of the file, as the file does not work if it is named properly. We are using the Altiris deployment solution and are running Windows XP Pro x32 and Windows 7 Pro. x32.

Thanks!

Anonymous · Answer

You can,t. What your going to have to do is disable the CD Roms in the BIOS or use local group policy to do that.

But there logged in as users? if it is a network that can be done all centrally by your network admin. All programs have the file extension .exe. if not The teachers log in as admin and you set up a user account with a GP tenplate that hides the drives control panel etc.

Problem with that one is it HAS TO BE DONE ON EVERY MACHINE. I am assuming the teachers need access to the cd rom for teaching purposes?

Note to the young man above maybe in ten years when you have your MCSA (like me) you might know what your talking about, till then don't pretend your smart cos your not.

? · Answer

Maybe you can log the activity and ban any student who writes an .exe file to the shared drive.  I'm sure you have a Computer User policy and since they are breaking it.  It will stop once a few students get busted.

Can .exe files be blocked from being written to the shared  drive?

Anonymous · Answer

Since you're trying to block a single executable that you're familiar with you can disable it from a Local Group Policy Editor using the setting:

User Configuration/Administrative Templates/System/Don't run specified Windows applications

Another option is to specify only the applications you want to allow Using:
User Configuration/Administrative Templates/System/Run only specified Windows applications

For help on opening the Group Policy Editor, see: http://technet.microsoft.com/en-us/library/cc731745.aspx

Anonymous · Answer

Well if you guys can restrict them to opening certain file types than you should easily be able to do it by name. Also antivirus can block programs from executing so whatever antivirus the school has, block that program from executing. Thats all i would know because my school the authorities get mad when we play counterstrike or minecraft but they know they cannot stop it unless they delete it off the network. Which in that case it will just get re-installed lol

Anonymous · Answer

If you can get into safe mode, you get a minimal windows boot that doesn't start everything. From the safe mode, you can usually just find the .EXE file and delete it. When you reboot, I think it is the F8 key you must hold down to get the appropriate menu where you can set safe mode. Assuming you can do this, switch back to normal mode by rebooting. It will ask you if you want to go safe mode again or a normal reboot. Take the nomal reboot.

Adrian · Answer

Hmm, not sure, but can you not restrict "removable drives" ?? That eliminates CD drives as well as USB sticks.
Check policy settings...
http://support.microsoft.com/kb/555324

Trending News

Block files of a certain name.?

6 Answers