Prevent users from running executables from usb sticks

[Balthier]

Guys, how do I prevent users from running executabels from usb sticks? I do want them to save and read files from the usb sticks, but not any executable files such as bat, exe, vbs etc.

 

[Brink]

Hello Balthier,

You could make their user accounts to be a standard user instead of administrators, then they will not be able to run anything that will affect the system or other users. However, this will affect them being able to do this at all, and not just from USB sticks.

http://www.sevenforums.com/tutorials/103538-user-account-type-change.html

In addition, you could use AppLocker to create rules to not allow their specific user accounts to open or run specific types of files.

http://www.sevenforums.com/tutorials/7844-applocker-create-new-rules.html

Hope this helps,
Shawn

 

[A Guy]

You can use Software Restriction Policies to only allow users to access programs that are in the Program Files, or Program Files (x86) for instance. It's a bit beyond me, but I'm sure Brink or another can get into more detail. I found this pod cast:

How Do I: Software Restriction Policies in Windows 7

and a link that explains:

How to make a disallowed-by-default Software Restriction Policy

A Guy