CHALLENGE

 

A way to stop people from bringing software into my network?

Submitted by Eric, MI

1 comments

Do you relate?

+4

Yes
Group Policy is my favorite part of managing a Microsoft Windows network. I want to use the power of Group Policy to stop all the software that makes its way onto my network.

Everyone who logs onto a computer on my network wants to install things that I don’t want there. I have successfully stopped them from downloading off the internet through my firewall. My big problem now is CDs and USB drives. The software that we run prevents me from making everyone use a guest account. I’ve tried methods of blocking certain extensions on removable devices, but some crafty folks bring in files with text extensions and then rename them after copying the files onto their Documents folder.

What is the best method of stopping users from accessing executable-type files through removable devices or through non-approved folders? Is AppLocker the answer?

Join the conversation. Agree? Disagree? Provide your advice.

  • Hi Eric

    This is a problem that a lot of companies face.

    Companies I have worked with in the past have used a piece of software called Sanctuary. This basically can block the use of unapproved devices, the running of unapproved code and executives and uses whitelists to ensure that you can completely control what your users can and cannot do.

    It might be worth having a look at that....

    Andrew Edney
    UsingWindowsHomeServer.com
blog comments powered by Disqus

About

360ITAdvice is a network of tech experts from top IT sites, their followers, and Microsoft. Through it, you can connect to a collective of uncommon intelligence. You'll be able to watch as a smart conversation unfolds then surrounds not just a generic problem, but your own IT challenge - the very one that won't give you rest.

Want advice?

Just ask. Plug in your challenge, and plug into the wise crowd that is 360ITAdvice.