Quote: Originally Posted by Rickson1982
In our company, we are using Windows 7 and my goal is to prevent users (also administrators) of specific workstations from running executables which are located on mapped network drives (servers).
I tried different things (e.g. Software Restriction Policies or Applocker => in both cases I tried the UNC address as well as the drive letter to set up the rules) but nothing worked.
I would really appreciate any suggestions.
Rickson1982, welcome to the windows 7 forum.
As mapped drives are just another letter in the drive listing, I don't believe that you can prevent users, especially administrators from running programs that reside on the mapped drive. If you could then all they would have to do would be to copy the executable to their local drive and run it from there.
Removing administrators rights is a tricky wicket because you might not be able to reverse changes.
you could go to the server where the maps are located and change the permissions on each of the executables.
outside of that, I am not sure why you want to do this.. Take them off the share if that's a problem.