Question

How To Restict Messenger.exe

Network, Group Policy, Network administration

Dear All, How we can use Software Restiction Policy in Group Policy Feature to restrict Some Software in the Network. For Example i want that only Network Administrator can use Net send command in the network to send message to other computer in the network and no other user use this command etc.
How we can give the Path in the Software restriction Policy.
Please give me some Solution.



Thanks
Muhammad Usman

In your group policy editor, go to Users|Windows Settings | Software Restriction | Make New Policy | go to additional rules | new hash rule > and choose the executable that you want to block. Now apply it to the ou with non-admin users.

Additionally, you can prevent messenger itself from running without software restrictions (they can be nasty if you chose to set the default to "restricted" because then you have to authorize paths, hashes, and/or executables to run.

In group policy the setting is:
User Configuration/Administrative Templates/Windows Components/Windows Messenger and the value is Do not allow Windows Messenger to be run