• About
  • Contact

    Have something to say? We want to hear it.

    Just send us a message using the form below.

    * * Required
    *


    Cancel

Welcome to OUR GLOBAL IT COMMUNITY.

Bringing together top IT experts, IT professionals and you to find solutions to today's biggest IT challenges. Ask for expert advice, post a solution and surround yourself with IT knowledge.

MEET THE EXPERTS

Brian Milne
Brian Milne
Daniel Petri
Daniel Petri
Debra Shinder
Debra Shinder
Lawrence Abrams
Lawrence Abrams
Lowell Heddings
Lowell Heddings
Jenny Stout
Jenny Stout

CHALLENGE

A way to stop people from bringing software into my network?

Asked by Eric, MI - March 10, 2010

Group Policy is my favorite part of managing a Microsoft Windows network. I want to use the power of Group Policy to stop all the software that makes its way onto my network. Everyone who logs onto a computer on my network wants to install things that I don’t want there. I have successfully stopped them from downloading off the internet through my firewall. My big problem now is CDs and USB drives. The software that we run prevents me from making everyone use a guest account. I’ve tried methods of blocking certain extensions on removable devices, but some crafty folks bring in files with text extensions and then rename them after copying the files onto their Documents folder. What is the best method of stopping users from accessing executable-type files through removable devices or through non-approved folders? Is AppLocker the answer?

Topics: Infrastructure Management , Security

Was this helpful?

+4

Yes
  • Hi Eric

    This is a problem that a lot of companies face.

    Companies I have worked with in the past have used a piece of software called Sanctuary. This basically can block the use of unapproved devices, the running of unapproved code and executives and uses whitelists to ensure that you can completely control what your users can and cannot do.

    It might be worth having a look at that....

    Andrew Edney
    UsingWindowsHomeServer.com
blog comments powered by Disqus