Stop application running

[slim]

Hi,

Does anyone know how to stop certain applications running on a computer by adding a key in the registry on windows 98.

I am sure you can add a registry key under window policies which prevents a application starting.

What I am trying to do is stop certain using uses on the company network from being able to install/run certain applications (MSM Messanger and file sharing software) in particular to keep us in line with our company internet usage policy. Once I now where to add the key in the resgistry I can add it to group login scripts on the server.

Or is there another way to do this.

Thanks

Slim

[mjc]

Does anyone know how to stop certain applications running on a computer by adding a key in the registry on windows 98.

I am sure you can add a registry key under window policies which prevents a application starting.

Under 98, no, not really......you need an NT based OS on NTFS to do that. You could restrict the user accounts to not allow installtion.

You could try restricting the running of installers 9wise, InstallShield and Windows Installer)....but if successful you wouldn't even be able to install any Windows updates. It is doubtful that it would work though....

[slim]

mjc,

That is near enough the same conclusion that we had come to after some testing.

So we have been reconfiguring our company firewall to block or ignore requests on ports which are used for specified applications to prevent the users using them (mostly msn messenger, yahoo messenger and any file sharing application).

But as we are finding out as well, alot of the instant message programs seem to switch ports when their normal port is blocked. By any chance does anyone have any technical information about the ports/IP addresses used by the following programs:

MSN Messenger
Yahoo Messenger
Morpheus
Kazza

Thanks for the help

Slim

[sleddog]

I've read frequently about the difficulty of blocking such applications by port because, as you say, they will change ports to find a way out.

Other options are (a) blocking access to specific websites (e.g., uninstall MSN Messenger and then block access to the Messenger website so it can't be re-downloaded) and (b) blocking specific mime types. This might be a possible way to stop KaZaa and such. And for Morpheus & KaZaa you could do the same as for Messenger -- block their download/install websites.

[slim]

Is it just me, or does it seem a bit silly of Microsoft to enable MSN instant messenger to change to seemingly random ports to avoid being blocked by a firewall.

Anyway, as suggested by sleddog I have removed the appplciations from the clients and blocked the website access.

Thanks

Slim

[mjc]

Is it just me, or does it seem a bit silly of Microsoft to enable MSN instant messenger to change to seemingly random ports to avoid being blocked by a firewall.


Do remember....this is MS we are talking about, if we listed all the bonehead things they've done over the years we'd be here untill the middle of next month, and probably will have only scratched the surface...besides this is what happens when you let the marketing department make technical descisions.