Disabling certain programs.

[Assimilator]

Have Win2K server setup as a DC.
I have a few different logons setup for different people here and I want to disable access to certain .exe's such as format and such that are in the WinNT folder for certain logons but I don't want to remove them or rename them as I may logon locally to those boxes as admin and would still need them and I don't want to disable access on my main machine either.

How do I go about disabling access for those certain people?

 

[ashpp]

Yup. In the GPO under (i think) Admin Templates\System in the users section there is "Don't run specified Windows applications". Stick in the filename and they won't run for those users.
The files will work if renamed.

HTH

Ash.

 

[Niksen]

or better yet, just set deny permissions on those files for those users.