Our students have been bringing in portable games to run on the school provided laptops. Stuff like minecraft and such. I am able to use our virus EPO server to catch whatever filename I chose, but the students have caught on and are renaming the file names. Normally I would use a group policy to apply an app locker policy but the laptops are running windows 7 PRO which wont run app locker polies. I also tried a restriced software policy with hash information and it didn't work either. Is there any other way to block certain files from being ran despite the filename?<o:p></o:p>

You might want to consider download Open DNS home which is free & allow you to restrict & control gaming, as well as prohibt of visiting adult sitesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

We can't lock down USB drives because they are needed for legitimate reasons. We also use Lightspeed for our web filtering but they can go to a home PC and download stuff and bring it in via usb. Vincent, I've already tried to disallow stuff via GPO to no avail. I know app locker does not work with win 7 pro but I'm not sure about that key. Either way I can't get it to work. :(

Use third party software to controll access to USB http://www.endsafe.com/11-en/Safend.aspx http://www.lumension.com etc Regards Milos

Hi, You can try to block USB to disable they bring the game. Please refer to How to Disable USB enabled mass storage devices? Also, the following policy may accomplish your goal: [User Configuration\Administrative Templates\System: Don't run specified Windows applications] For example, if you add sol.exe in the "List of disallowed applications", the Solitaire game cannot be opened. For more information, please refer to: HOW TO: Restrict Users from Running Specific Windows Programs in Windows 2000 http://support.microsoft.com/default.aspx/kb/323525 Hope this helps. Vincent Wang TechNet Community Support

Hi, Given this situation, you have to set the programs that allowed to run using the group policy. It is unable to block the program using GPO is they change the names or versions. Thank you for your understanding. Thanks Vincent Wang TechNet Community Support