Good day , I would like to bloque all mobile application, such as mobile vlc from active directory because from GPO I disabled the instalation but ow the users , they bring the mobile application and use it like games without need to install it . can someone advice me how I ca solve this biggggggggg problem ? Many thanks Regardse

Hello, Advanced routers such as Sonicwall have the ability to block speficif application from downloading or you can alltother block sites by categories. You can also utilize packet shaping to render on-line games useless. Using GPO you can disable mass storage devices such as USB drives and CD ROMS the user's will not be able to install software. To set up GPO with software restriction polocies, see the link below: http://blog.windowsnt.lv/2011/06/01/preventing-malware-with-srp-english/ Miguel Fra | Falcon IT Services, Miami, FL www.falconitservices.com | www.falconits.com | Blog

On Sat, 15 Sep 2012 16:18:46 +0000, Falcon IT Services wrote: To set up GPO with software restriction polocies, see the link below: http://blog.windowsnt.lv/2011/06/01/preventing-malware-with-srp-english/ <http://blog.windowsnt.lv/2011/06/01/preventing-malware-with-srp-english/> If your environment supports it, AppLocker is much better than Software Restriction Policies. http://technet.microsoft.com/en-us/windows/applocker.aspx Paul Adare MVP - Forefront Identity Manager http://www.identit.ca No line available at 300 baud.

On Sat, 15 Sep 2012 16:18:46 +0000, Falcon IT Services wrote: To set up GPO with software restriction polocies, see the link below: http://blog.windowsnt.lv/2011/06/01/preventing-malware-with-srp-english/ <http://blog.windowsnt.lv/2011/06/01/preventing-malware-with-srp-english/> If your environment supports it, AppLocker is much better than Software Restriction Policies. http://technet.microsoft.com/en-us/windows/applocker.aspx Paul Adare MVP - Forefront Identity Manager http://www.identit.ca No line available at 300 baud.

Hello , Thank you for your answer but in my situation I can't disable the USB because they need for job so how I ca stop this kind of application ? they can do copy and past from USB and they play games or see movies , we can have one GPO specified for this kind of applications to bloque ? Many Thanks Regards e

My links as well as Paul's will guide you on how to set up restrictive policies for software execution. Even if they bring the s/w on a CD or USB, these policies will affect their ability to execute.Miguel Fra | Falcon IT Services, Miami, FL www.falconitservices.com | www.falconits.com | Blog