Restricting software client workstations can run?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

keith - 31 Jul 2003 10:54 GMT

Hi,
I've been asked an interesting question by one of my
customers. How can I prevent client workstations
connecting to SBS from running certain programs on them,
the workstations are XP professional.

Or to put it another way can I specify a list of programs
that users CAN run and restrict all others.

I would have thought I could do this through a global
policy but I'm not sure how?

Keith

Reply to this Message

Petri Suominen - 31 Jul 2003 13:39 GMT

Hi, You can do that through Group Policys, but they affect users, not
workstations.

Ie if you have a user who can play solitaire on his own PC, but not when he
is logged on another PC, no can do.

This policy is set at
/User Configuration/Administrative Templates/System/Don't run specific
windows applications

br,

Petri

> Hi,
> I've been asked an interesting question by one of my
[quoted text clipped - 9 lines]
>
> Keith

Reply to this Message

keith - 31 Jul 2003 14:38 GMT

Hi Petri, I found this setting, using gpedit.msc, is this
correct.
It seems to work fine on the SBS server itself, but is not
affecting XP clients logging into the domain.

I suspect I'm in the wrong place as gpedit.msc just refers
to local computer policy.

I'm pretty new to this idea, so apologies for my ignorance.

Keith

>-----Original Message-----
>Hi, You can do that through Group Policys, but they affect users, not
[quoted text clipped - 26 lines]
>
>.

Reply to this Message

Petri Suominen - 31 Jul 2003 17:45 GMT

Hi

You need to go to AD Users and domains, right click the highest level (the
domain itself) and select properties from there. This is where you setup to
domain wide group policies.

Petri

> Hi Petri, I found this setting, using gpedit.msc, is this
> correct.
[quoted text clipped - 42 lines]
> >
> >.

Reply to this Message