5 pts.
 GPO Settings: Concatenate the ‘List of disallowed applications’ from different GPOs
Hello.
(This post is a bit of a mind teaser...)

The task:
My company's Board wishes to forbid the use of a list of programs, but maintain an exception plan.
[ i.e. forbid the use of skype.exe, dropbox.exe, googledrivesync.exe, etc.... for everyone except that John (member of the AllowSkype Group) can use skype and Peter (member of the AllowGoogleDrive Group) can use googledrive, and Mary (member of the AllowSkype and member of AllowDropbox Group) can use Dropbox and Skype ]..

Using 'List of disallowed applications' will suffice, but I would have to build a GPO for every combination..

Does anyone have ideas for a workaround to accomplish this by using GPO?
I'm trying to avoid the development of a program to concatenate several strings and tweak the 'DisallowRun' registry hive every time a user logs on the domain.


TIA
raa



Software/Hardware used:
Windows Server 2003
ASKED: November 19, 2012  3:24 PM
UPDATED: November 19, 2012  3:37 PM

Answer Wiki:
Last Wiki Answer Submitted:  Be the first to answer this question.
All Answer Wiki Contributors:  Be the first to answer this question. ruicostume   5 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _