My company's Board wishes to forbid the use of a list of programs, but maintain an exception plan.
[ i.e. forbid the use of skype.exe, dropbox.exe, googledrivesync.exe, etc.... for everyone except that John (member of the AllowSkype Group) can use skype and Peter (member of the AllowGoogleDrive Group) can use googledrive, and Mary (member of the AllowSkype and member of AllowDropbox Group) can use Dropbox and Skype ]..
Using 'List of disallowed applications' will suffice, but I would have to build a GPO for every combination..
Does anyone have ideas for a workaround to accomplish this by using GPO?
I'm trying to avoid the development of a program to concatenate several strings and tweak the 'DisallowRun' registry hive every time a user logs on the domain.