Active Directory Software Restriction Policy

[LHammonds]

You cannot just rely on a single anti-virus program to catch everything that comes through so you need more methods of handling problems. The Software Restriction Policy that comes with Active Directory Domains is a great tool for such things.

 

If you maintain an domain, here are some programs you might want to block from ever executing:

 

Rule Type: Path

Path: %WINDIR%\system32\2.exe

Desc: Virus.Win32.Virut!IK

 

Rule Type: Path

Path: %CommonProgramsFiles%\Java\Java Update\jusched.exe

Desc: Java updater. Keeps from constantly being run on computers.

 

Rule Type: Path

Path: %CommonProgramsFiles(x86)%\Java\Java Update\jusched.exe

Desc: Java updater. Keeps from constantly being run on computers.

 

---

 

For those who have domains and are not familiar with this tool, do the following:

 

1. Open Active Directory Users and Computers
   
2. Right-click on your top-level domain and select Properties
   
3. Click the Group Policy tab
   
4. Click "New" to add a new policy and name it something like Anti-Malware
   
5. Select your policy and click Edit
   
6. Expand Computer Configuration --> Windows Settings --> Security Settings --> Software Restriction Policies --> Additional Rules
   
7. Right-click on the right pane and select one of the 4 types of new rules you can add.

 

More Info @ Microsoft TechNet

[Illiad86]

Hmmm very nice, I'm so sick of Java updater running constantly lol...crashed for some odd reason..while I was playing Oblivion too...urgh. Luckily didn't crash out the game.

 

Hmmm...is that for Vista/7? Where is this located in XP Pro?...

 

ahh Just found it lol...Control Panel;Administrative Tools; Local Security Policy; Software Restriction Policies; Additional Rules :)

 

Thanks :)