How can you stop renaming application files?

G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In Active Dircetory the software allow list does not let you use a pathe so
that only that application such iexplore, only runs from C:\Program
Files\Internet Explorer. User know that if you change firefoxsetup.exe to
iexplore.exe the setup program will install. Once it install, you can change
the firefox.exe to iexplore.exe and the program will run.
With all the install set to disable domain user are still able to install
and run the software. This has been a problem since NT server 3.0.
Any sugestions?
 

map

Distinguished
Apr 6, 2004
783
0
18,980
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"AnodNoodles" wrote:

> In Active Dircetory the software allow list does not let you use a pathe so
> that only that application such iexplore, only runs from C:\Program
> Files\Internet Explorer. User know that if you change firefoxsetup.exe to
> iexplore.exe the setup program will install. Once it install, you can change
> the firefox.exe to iexplore.exe and the program will run.
> With all the install set to disable domain user are still able to install
> and run the software. This has been a problem since NT server 3.0.
> Any sugestions?

I think that you overcooked your Noodles!
Just let it install in the default directory.
If you are asking this to stop employees from installing "whatever" no
matter what you do it can and will be bypassed.
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In the list of "Run only allowed Windows applications" only the appicatation
name is listed; i.e, winword.exe, iexplore.exe, jbuilder.exe. Thus allowing
students/domain user to rename files i.e. firefox.exe to iexplore.exe. How
can this be stop? If you can put in the full path for the application to run
i.e. C:\Program Files\Internet Explorer\iexplore.exe. Than if the user rename
the file it still can not run since the path is different.



"MAP" wrote:

>
>
> "AnodNoodles" wrote:
>
> > In Active Dircetory the software allow list does not let you use a pathe so
> > that only that application such iexplore, only runs from C:\Program
> > Files\Internet Explorer. User know that if you change firefoxsetup.exe to
> > iexplore.exe the setup program will install. Once it install, you can change
> > the firefox.exe to iexplore.exe and the program will run.
> > With all the install set to disable domain user are still able to install
> > and run the software. This has been a problem since NT server 3.0.
> > Any sugestions?
>
> I think that you overcooked your Noodles!
> Just let it install in the default directory.
> If you are asking this to stop employees from installing "whatever" no
> matter what you do it can and will be bypassed.