How can you stop renaming application files?

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In Active Dircetory the software allow list does not let you use a pathe so
that only that application such iexplore, only runs from C:\Program
Files\Internet Explorer. User know that if you change firefoxsetup.exe to
iexplore.exe the setup program will install. Once it install, you can change
the firefox.exe to iexplore.exe and the program will run.
With all the install set to disable domain user are still able to install
and run the software. This has been a problem since NT server 3.0.
Any sugestions?
2 answers Last reply
More about stop renaming application files
  1. Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

    "AnodNoodles" wrote:

    > In Active Dircetory the software allow list does not let you use a pathe so
    > that only that application such iexplore, only runs from C:\Program
    > Files\Internet Explorer. User know that if you change firefoxsetup.exe to
    > iexplore.exe the setup program will install. Once it install, you can change
    > the firefox.exe to iexplore.exe and the program will run.
    > With all the install set to disable domain user are still able to install
    > and run the software. This has been a problem since NT server 3.0.
    > Any sugestions?

    I think that you overcooked your Noodles!
    Just let it install in the default directory.
    If you are asking this to stop employees from installing "whatever" no
    matter what you do it can and will be bypassed.
  2. Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

    In the list of "Run only allowed Windows applications" only the appicatation
    name is listed; i.e, winword.exe, iexplore.exe, jbuilder.exe. Thus allowing
    students/domain user to rename files i.e. firefox.exe to iexplore.exe. How
    can this be stop? If you can put in the full path for the application to run
    i.e. C:\Program Files\Internet Explorer\iexplore.exe. Than if the user rename
    the file it still can not run since the path is different.


    "MAP" wrote:

    >
    >
    > "AnodNoodles" wrote:
    >
    > > In Active Dircetory the software allow list does not let you use a pathe so
    > > that only that application such iexplore, only runs from C:\Program
    > > Files\Internet Explorer. User know that if you change firefoxsetup.exe to
    > > iexplore.exe the setup program will install. Once it install, you can change
    > > the firefox.exe to iexplore.exe and the program will run.
    > > With all the install set to disable domain user are still able to install
    > > and run the software. This has been a problem since NT server 3.0.
    > > Any sugestions?
    >
    > I think that you overcooked your Noodles!
    > Just let it install in the default directory.
    > If you are asking this to stop employees from installing "whatever" no
    > matter what you do it can and will be bypassed.
Ask a new question

Read More

Software Windows XP