2000 Server Policy on XP Client

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I have a new policy in effect blocking all applications from being run, except the ones i allow. this works great on my 2000 Workstations, but has no effect on my XP Pro workstations... is there anything im doing wrong for this not to work, or do i have to upgrade to Server 2003??

Thanks,
Dan

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

While Windows 2000 had some basic features to block execution of programs
based on filenames, Windows XP and higher have Software Restriction
Policies, which base the restrictions on the hash of the file. Therefore, a
user cannot bypass your restriction by renaming their banned executable to
winword.exe, for example.

If you manage your Windows 2000 Active Directory from a Windows XP Pro
machine, you should find the software restriction policies. You don't need
to upgrade your domain to Windows Server 2003 to gain this functionality.

Hope this helps

Oli


"Dan Cooper" <Dan Cooper@discussions.microsoft.com> wrote in message
news:E6023B4C-D243-4A90-A49E-BA24C12CDCC4@microsoft.com...
>I have a new policy in effect blocking all applications from being run,
>except the ones i allow. this works great on my 2000 Workstations, but has
>no effect on my XP Pro workstations... is there anything im doing wrong for
>this not to work, or do i have to upgrade to Server 2003??
>
> Thanks,
> Dan