Blocking executables from certain drives/paths.

[Guest aptgetmoo]

Hello.

I've just bought a new laptop with Vista Home Premium installed. I used to

create policies on my old laptop(XP Pro) using gpedit.msc to block all .exe

files from running except of those in C: partition(my Windows partition). I

did this to prevent me(or whoever using my laptop) from accidentally run

viruses from usb drives, well there is no need for me to run .exe files from

there anywhere. Well since there is no gpedit.msc in Vista Home Premium, how

do I do this from the registry?

[Guest kentsyl]

Put a folder on your USB drive lable it "AUTORUN.INF", then put a note pad

file inside and write whatever you want on it, also save it as "AUTORUN.INF"

open properties on both check read only and hidden. This should keep most

viruses and worms from installing on the USB drive to start with, but if one

dose it won't be able to install a autorun file because one will allready be

there. Regular virus scans of the USB drives is also a good idea, and you

shouldn't ever double click a .exe file without a virus scan first.

 

"aptgetmoo" wrote:

<span style="color:blue">

> Hello.

> I've just bought a new laptop with Vista Home Premium installed. I used to

> create policies on my old laptop(XP Pro) using gpedit.msc to block all .exe

> files from running except of those in C: partition(my Windows partition). I

> did this to prevent me(or whoever using my laptop) from accidentally run

> viruses from usb drives, well there is no need for me to run .exe files from

> there anywhere. Well since there is no gpedit.msc in Vista Home Premium, how

> do I do this from the registry?</span>

[Guest aptgetmoo]

Thanks for your reply. Actually I have done that before and it did not work,

a virus could over write the file even though it is read only. And what I

wanted to do is creating a policy that will block all .exe from running from

my usb drives and cdrom drive. Virus scanning is a good tip but some viruses

are not known to the virus scanner. Anyway, like what I've said, I don't want

to run any .exe file from my usb drives. Hope anyone can point me on

creating apolicy through the regedit

 

"kentsyl" wrote:

<span style="color:blue">

> Put a folder on your USB drive lable it "AUTORUN.INF", then put a note pad

> file inside and write whatever you want on it, also save it as "AUTORUN.INF"

> open properties on both check read only and hidden. This should keep most

> viruses and worms from installing on the USB drive to start with, but if one

> dose it won't be able to install a autorun file because one will allready be

> there. Regular virus scans of the USB drives is also a good idea, and you

> shouldn't ever double click a .exe file without a virus scan first.

>

> "aptgetmoo" wrote:

> <span style="color:green">

> > Hello.

> > I've just bought a new laptop with Vista Home Premium installed. I used to

> > create policies on my old laptop(XP Pro) using gpedit.msc to block all .exe

> > files from running except of those in C: partition(my Windows partition). I

> > did this to prevent me(or whoever using my laptop) from accidentally run

> > viruses from usb drives, well there is no need for me to run .exe files from

> > there anywhere. Well since there is no gpedit.msc in Vista Home Premium, how

> > do I do this from the registry?</span></span>