1st: Don't let your users be local admins
2nd: Use applocker to block the file type: http://technet.microsoft.com/en-us/library/dd723685(v=ws.10).aspx
- Proposed as answer by ChazNewman Monday, January 06, 2014 9:44 PM
Hi S.Vijay Kumar,
In addition to S.Vijay Kumar’s suggestion, you can also use Software Restriction Policies via GPO to disallow the software running.
For your information, please refer to the article What Are Software Restriction Policies? to learn more about that policy:
In addition, refer to the following articles to learn how to set this policy:
Under Applocker policies, create a new "deny" rule under "executable rules". Select the option to base the condition on the "publisher", and then point to the FireFox download as a reference file.
You should then check the box to use "custom values", and modify the file version to "0.0.0.0". This will apply the rule to all versions of FireFox, rather than just the one you used as a reference file. In the end your rule should look something like this.
AppLocker only works for Windows 7 / 8 Enterprise and Windows 7 Ultimate.
Here is the complete list of supported operating systems:
MVP Group Policy - Mythen, Insiderinfos und Troubleshooting zum Thema GPOs: Let's go, use GPO!
- Edited by Matthias WolfMVP Friday, January 03, 2014 4:41 PM