Software Blacklist in Registry
I know that I can block specific executables from running by using the DisallowRun key in the registry. But that doesn't stop them from being installed, and I don't want to block Setup.exe altogether, as that would prevent us from installing any software
at all! But I want to be able to block specific software installations, such as Limewire, BitTorrent, and the like. I want to be able to do this from the registry, without installing any software, or messing with GP, as not all of the machines
in question are Pro Operating Systems. Is this at all possible? Is there a way to block specific installers without having the individual hash for each installer? From what I understand, this would only prevent a user from installing a specific
VERSION of a software, and I would need to update the hash list each time a new version is released! Is it possible to parse a setup file so that I can block a program NAME, even if the filename is simply Setup.exe? I need this to be possible for
all versions of XP, Vista and Windows 7 (not necessarily server OS's).
Thanks in advance for your help, I have been using TechNet for years now, and have yet to be disappointed!
February 22nd, 2011 3:45pm
Windows has no built-in functionality to do this without 3rd party software. The closest you can get is App-Locker, but that requires Group Policy. App-Locker will only work on Windows 7 Ultimate and Enterprise Editions. That will leave XP and Vista out
of the picture.Ray - Author of Windows 7 for XP Professionals
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2011 2:01am
Windows has no built-in functionality to do this without 3rd party software. The closest you can get is App-Locker, but that requires Group Policy. App-Locker will only work on Windows 7 Ultimate and Enterprise Editions. That will leave XP and Vista out
of the picture.Ray - Author of Windows 7 for XP Professionals
February 23rd, 2011 9:57am