Q: I'm looking for a way to block my domain users from executing certain programs from their Windows Vista and Windows XP desktops. Should I investigate third-party software for this or does Microsoft include features in the OS that can handle this? If there is such feature in Windows. are there any differences between the way this is implemented in Windows XP and Windows Vista, and Windows Server 2003 and Windows Server 2008?
A: Beginning with Windows 2003 and XP, Microsoft includes a feature called Software Restriction Policies (SRPs) in the Windows OS, which provides the functionality you are looking for. SRPs allow code to be classified as either trusted or untrusted. Trusted code can be executed and untrusted code cannot. SRPs are a very powerful mechanism: No code stored on your Windows system can hide from SRPs--no matter where the code comes from and no matter who or what (a user, a machine, or a service) executes it. SRPs can apply to any piece of code including scripts, batch files, and executables. By default, SRPs exclude DLL files – but you can change this default behavior as I'll explain. . . .
Register
shehzad4746 March 13, 2008 (Article Rating: