locked
allow execution programs Program Files - Programmi RRS feed

  • Question


  • I have installed steady state on Winxp Professional Italian.
    Some programs are in the folder "Program Files" and others in folder "Programmi".
    I can allow execution of programs present in folders C, Windows and Programmi.

    It's possible to allow execution of programs present in C, Windows, Programmi AND Program Files?

    huvi


    Monday, October 8, 2007 12:43 PM

Answers

  • Hi Ilpilz,

     

    Unfortunately, SteadyState cannot add a other directories which contains the allowed programs.

     

    However, as this feature is realized through group policy, you can achieve this with Software Restriction Policy of Windows XP:

    ----------------------

    Please uncheck the “Allow only programs in Program Files and Windows to run” option first.

     

    1. Click Start and then Run.

    2. Type in gpedit.msc and click OK.

    3. Locate: Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies\Security Levels

    4. Double click Disallowed. Click “Set as default” and then click OK.

     

    Note: This security level will prevent all software from running except the rules under “Additional Rules”

     

    5. Locate: Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies\Additional Rules

    6. Right click the blank space and then choose “New Path Rule”.

    7. Input the path of the Programmi folder. Configure Security Level as Unrestricted and click OK.

     

    Note: “New Path Rule” will allow all programs under the path you specified. If there is only one program. “New Hash Rule” is suggested.

     

    For more information about Software Restriction Policy, please refer to the following website:

     

    Software Restriction Policy for Windows XP Clients

    http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch06.mspx

     

    Best Regards,

    Wednesday, October 10, 2007 7:14 AM

All replies

  • Hi Ilpilz,

     

    Unfortunately, SteadyState cannot add a other directories which contains the allowed programs.

     

    However, as this feature is realized through group policy, you can achieve this with Software Restriction Policy of Windows XP:

    ----------------------

    Please uncheck the “Allow only programs in Program Files and Windows to run” option first.

     

    1. Click Start and then Run.

    2. Type in gpedit.msc and click OK.

    3. Locate: Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies\Security Levels

    4. Double click Disallowed. Click “Set as default” and then click OK.

     

    Note: This security level will prevent all software from running except the rules under “Additional Rules”

     

    5. Locate: Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies\Additional Rules

    6. Right click the blank space and then choose “New Path Rule”.

    7. Input the path of the Programmi folder. Configure Security Level as Unrestricted and click OK.

     

    Note: “New Path Rule” will allow all programs under the path you specified. If there is only one program. “New Hash Rule” is suggested.

     

    For more information about Software Restriction Policy, please refer to the following website:

     

    Software Restriction Policy for Windows XP Clients

    http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch06.mspx

     

    Best Regards,

    Wednesday, October 10, 2007 7:14 AM
  • Thanks a lot.

    ilpilz


    Wednesday, October 10, 2007 8:04 AM