none
Forbid launching *.scr files except running one

    Question

  • Hello everyone. Recently we get a task from our security group: They want to block executing all *.src files (screensaver). The problem is - we have our company screensaver, and we want it to work on all our stations without problems. Is there any way to implement such blocking?
    Wednesday, February 18, 2015 8:40 AM

Answers

  • Try a software restriction policy path rule *scr disallowed and then  an unrestricted path rule to your desired screen saver
    • Marked as answer by Kerberrus Thursday, February 19, 2015 10:01 AM
    Thursday, February 19, 2015 9:46 AM

All replies

  • Just don't let them change the background and configure a GPO to set the corporate image http://www.petenetlive.com/KB/Article/0000461.htm
    Wednesday, February 18, 2015 10:36 PM
  • They already cannot do it. We just want to block scr files because of malware. Some users double-click such files which cause problems.
    • Edited by Kerberrus Thursday, February 19, 2015 8:23 AM
    Thursday, February 19, 2015 8:23 AM
  • Try a software restriction policy path rule *scr disallowed and then  an unrestricted path rule to your desired screen saver
    • Marked as answer by Kerberrus Thursday, February 19, 2015 10:01 AM
    Thursday, February 19, 2015 9:46 AM