Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Prevent executables from running on mapped network drives

15 Jan 2013   #21
Parman

Windows 7 Ultimate x64
 
 

What OS version are they running?

When you say image. You mean they're built from an image of a different machine?

Are you going to the individual machine and setting up the policy?

If the policy looks the same as on the server then im sure they're correct also i was just going to double check them.


My System SpecsSystem Spec
.
15 Jan 2013   #22
Rickson1982

Windows 7 Professional 64Bit
 
 

They are setting up one machine (install OS => Win7 Pro and common applications) and create an image of that machine. Afterwards, they are using this image to set up the other workstations.

I presume they have set up the security policies manually on that machine or let them at the default values.

Yes, I am going to the individual machine and I try to modify its predefined policy.

As I mentioned, if I set of the rules on my own workstation (which is part of the domain) everything works fine
My System SpecsSystem Spec
15 Jan 2013   #23
Parman

Windows 7 Ultimate x64
 
 

Windows 7 Pro thats the problem.

Quote:
To create rules for a local computer, the computer must be running Windows 7 Ultimate or Windows 7 Enterprise. If you want to create rules for a Group Policy Object (GPO), you can use a computer that is running any edition of Windows 7 if the Remote Server Administration Tools are installed. AppLocker rules can be created on any edition of Windows Server 2008 R2. Although you can create AppLocker rules on computers running Windows 7 Professional, they will not be enforced on those computers. However, you can create the rules on a computer running Windows 7 Professional and then export the policy for implementation on a computer running an edition of Windows that does support AppLocker rule enforcement.
AppLocker: Frequently Asked Questions

Applocker is only available on ultimate and enterprise.
My System SpecsSystem Spec
.

15 Jan 2013   #24
Rickson1982

Windows 7 Professional 64Bit
 
 

I have found it also. I just wanted to write you

Thank you a lot for your support!

Is there a freeware tool which does the same as AppLocker?
My System SpecsSystem Spec
15 Jan 2013   #25
Parman

Windows 7 Ultimate x64
 
 

You could try to setup software restrictions and add a path rule in there.
My System SpecsSystem Spec
15 Jan 2013   #26
Parman

Windows 7 Ultimate x64
 
 

You could just try to change the permissions of the folder for anyone thats not on the domain. You can use special permissions an do deny or remove allow for traverse folder /execute file.
My System SpecsSystem Spec
15 Jan 2013   #27
Rickson1982

Windows 7 Professional 64Bit
 
 

As far as I know, I can only block single *.exe file there.

I don't know if I can define a rule there, where I can only specifiy the mapped network drive (e.g.: K:\) and all its executables will be blocked (also those in K:\'s subfolders).
My System SpecsSystem Spec
15 Jan 2013   #28
Parman

Windows 7 Ultimate x64
 
 

For software restrictions I'm not entirely sure. I have never used them. I did test out the permission and it worked flawless i was unable to open the exe file but i could navigate to it.
My System SpecsSystem Spec
16 Jan 2013   #29
Rickson1982

Windows 7 Professional 64Bit
 
 

Hi!

Well, with software policies I think I can only block executables from running which are not trying to install new software. But I am not completely sure. I tried it out yesterday and I could not prevent the Windows installers from running.

I hope upgrading Win7 Pro to Win7 Enterprise/Ultimate is not a big issue if this workaround is required.
My System SpecsSystem Spec
Reply

 Prevent executables from running on mapped network drives




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
.bat for migrating mapped network drives?
Can someone please provide a .bat file that will copy network shares on old computer and another .bat file to map those drives on new computer? Thank you Erik
Network & Sharing
mapped network drives without drive letters
I have the problem of a long list of redundant mapped network drives without drive letters, for example, documents, documents~1, documents~2, etc. all with same location...right clicking on the mapped does not present any "disconnect" option. Oh, they do not appear as mapped network drives under...
Network & Sharing
Manually mapped network drives
Hi All Hope you can help. I want to know if there is anyway to find out if a network shared drive (showing within 'My Computer') is manually connected/mapped. (btw we are using a AD - GPO & Desktop Authority) I don't want to disconnect all the drives and then log the user off as i want...
Network & Sharing
1 of 3 Mapped Network Drives not showing up
Windows Server 2008 R2 Windows 7 32 Bit I have a Windows 7 Enterprise box that when started will only create 2 of 3 mapped network drives. This does not happen every time either, just about 2-3 days of the 5 day work week. 2 of the drives are mapped via a script, while the 1 drive that is the...
Network & Sharing
Prevent users from running executables from usb sticks
Guys, how do I prevent users from running executabels from usb sticks? I do want them to save and read files from the usb sticks, but not any executable files such as bat, exe, vbs etc.
Customization
Mapped network drives are lost
I have a problem with mapped network drives disconnecting. I run Win7 Pro connecting to Win Server 2003. Reboot and the drives are there. After a while a red cross appears against them in Explorer. I can usually see the contents, but running a program that requires those resources fails. The only...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:05.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App