why not do it the other way round like just specify the list of programs that you want the users to be able to run

if can be done using group policies in win2k / winxp
additionally you can setup many restrictions that can lockdown the windows server / workstation airtght !

-aditya

-----Original Message-----
From: Simon Taplin [mailto:simont (at) pop.co (dot) za [email concealed]]
Sent: Saturday, January 10, 2004 10:46 PM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Active Directory Question

Is is possible to setup a policy on Win2000 Active Directory whereby you can
use wildcards to deny users access to running certain programs, for example
blocking userss running setup*.*

Thanks
Simon

---
This email is hopefully virus free as it has been
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.558 / Virus Database: 350 - Release Date: 2004/01/02

________________________________________________________________________

Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]