Got a Win2k3 server here with WinXP stations running SP2.
We're trying to implement some software restriction policies, mainly to stop people running batch files (.bat) from their user areas (N: drive)
We've created a path rule of:
*.bat
in the user policy, which works, it stops *any* batch files running, but stops legit ones too. So we want to make it more specific, so used:
N:\*.bat
But this doesn't work. So we tried alternatives, including full UNC server path to their user area from the server. We tried using %homepath%\*.bat but no joy there. We've tried everything we can think of, but no luck.
So how can we set a rule to stop people running batch files from their user area???
Cheers!
We're trying to implement some software restriction policies, mainly to stop people running batch files (.bat) from their user areas (N: drive)
We've created a path rule of:
*.bat
in the user policy, which works, it stops *any* batch files running, but stops legit ones too. So we want to make it more specific, so used:
N:\*.bat
But this doesn't work. So we tried alternatives, including full UNC server path to their user area from the server. We tried using %homepath%\*.bat but no joy there. We've tried everything we can think of, but no luck.
So how can we set a rule to stop people running batch files from their user area???
Cheers!