Hi guy's i was wondering if any of you know of an application that can stop user's from running 3rd party applications. The user's in question do not have local admin rights however they are sending application files via email or usb sticks and running them from that so there is not a full installation on the machine. An example would be using different browser's than what we have set up bypassing our group policy proxy settings. Any help would be appreciated. Cheers.
Re: Restrict user's running applications
11 years 5 months ago #23190
Depends really on your budget. Websense's Client Policy Manager is pretty good and quite flexiable. Ofcourse, some HIDS can probably also do this by adding the signatures or the files that are not allowed (or you can do it the other way around and install what they can use and then block everything else).
I would do a little more research but what i have seen from Websense, the client policy manager is pretty good, not sure how the licensing works i.e. if you can get this on its own. Anyhow, here is a link, when i did my training on it the CPM looked pretty impresive but its not something we can install in our environment becauase we don't own the equipment.
There are others, Sophos Anti-Virus are also doing application control within their AV but currently its only got a limited number of applications within its database, their next release also has Removable Drive restrictions built in so you can stop users from using USB Pen Drives and the like.
You can do it in Group Policy for free but it can be a pain to configure.