Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Problems in config software restriction policy to restrict all apps

15 Jul 2017   #1
gkartikrj

Windows 7 Ultimate 32 bit
 
 
Problems in config software restriction policy to restrict all apps

I don't want any standard user to run any application expect those which are already installed, so I created a path rule in software restriction policy and disallowed all applications (.exe, .msi & .msp) except those which are present in windows & program files folder. But problem is that some applications (like Matlab) require access to PROGRAM DATA (like Java) and APP DATA FOLDER which contain many executables. If I allow those folders, standard users are able to copy any portable application into those folder & run it from there. That means users are able to write into those folders.
However, I can create path rule for all executables present in those folders and allow them, but they too many of them, so its not convenient to create rules one by one.
Also I have personal folder in Local Drive (D) which contains some useful portable applications, so I want to allow that folder and at same time make it write protected so that standard user cannot copy any other application and run it at their own will.
Any solution?
System Details:
Windows 7 Ultimate 32 bit service pack 1


My System SpecsSystem Spec
.
15 Jul 2017   #2
samuria

win 8 32 bit
 
 

Welcome to the forum. Is this a home pc or work? It depends what the files are and what they do you could just set the folder to read and exicutebut no write but that depends if any config is saved in any of the files
My System SpecsSystem Spec
16 Jul 2017   #3
gkartikrj

Windows 7 Ultimate 32 bit
 
 

Its my home PC and there are executable files in Program Data and App Data folder. The problem is that they are already set to 'no write' and still users are able to copy files into it, whereas the same configuration is for Program Files folder and standard users are not allowed to write anything into it.


Attached Thumbnails
Problems in config software restriction policy to restrict all apps-screenshot_2.png   Problems in config software restriction policy to restrict all apps-screenshot_3.png  
Attached Images
Problems in config software restriction policy to restrict all apps-screenshot_4.png 
My System SpecsSystem Spec
.

Reply

 Problems in config software restriction policy to restrict all apps




Thread Tools




Similar help and support threads
Thread Forum
How to use local group policy editor to restrict users to Desktop
I created a policy for non-administrators in Microsoft Management Console. However, I couldn't find a policy to restrict user into a specified folder.
General Discussion
Local Policy restriction issue
I'm working with a Window 7 Enterprise 64-bit system. It seems that anyone in the Administrators group that tries to open Internet Explorer gets the error "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item." First off, anyone...
General Discussion
restriction software
hi am new here i need a good internet restriction softwares
Software
WMC can not open the program because of a software restriction policy
I can't no longer start Windows Media Center, when I try It get out the message "can not open the program because of a software restriction policy". I have Win 7 Ultimate 64bit It is the only program that not starts and that occurred a few days ago after installing and uninstalling some...
Media Center
Limited account, restrict apps, but has install rights
Dear Seven members, I am running Windows 7 Prof x64 and I want to add a limited user account. I will be leaving home for about 6 months and a friend will be using my computer in the meantime. this means I won't be able to access the computer in that time. I want to create an account for him,...
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:11.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App