What are the options for restricting access to applications?

[netmatt]

I found AppLocker by SmartX, but was hoping to find something Open Source so that I had a better understanding of how this works, and can perhaps tailor it if I need to? 

Matt

[Jimdoria]

If you're on Windows, it may be possible to do this using NTFS file permissions. It's built right in.

[app103]

If you're on Windows, it may be possible to do this using NTFS file permissions. It's built right in.

That's how I got rid of the obnoxious ad window every time the free version of Avira updates.

Example of how to do that is here. Follow the same steps to do it with any other application you don't want to run.

[MilesAhead]

Interesing info in the article. I'll have to try that on W7.  For Vista I only have Home Premium so that option isn't there. I use a freebie App killer to kill off stuff I don't want to run ever, like mobsync.exe.

[Shades]

Booting into safe mode with the Administrator in XP Home and typing: 'secpol.msc' (or 'gpedit.msc') in the run dialog from the start menu doesn't work?

One reason more to be happy with XP Pro 

[MilesAhead]

Booting into safe mode with the Administrator in XP Home and typing: 'secpol.msc' (or 'gpedit.msc') in the run dialog from the start menu doesn't work?

One reason more to be happy with XP Pro 

Don't know. I don't have xp home to try it.

[mahesh2k]

I've problem on my hard disk, that one folder is not being deleted. there is some ads_data file inside the folder because of which it is not getting deleted . is there any way i can delete that folder? folder contains nothing other than that file. can i override the attribute and delete that folder?

[app103]

Booting into safe mode with the Administrator in XP Home and typing: 'secpol.msc' (or 'gpedit.msc') in the run dialog from the start menu doesn't work?

One reason more to be happy with XP Pro 

XP Home doesn't have group policies so 'secpol.msc' (or 'gpedit.msc') wll not work.

If you read the full instructions on the page I linked to, it explained how to do it for XP Home.

Windows XP Home users can try this method (slightly edited to make it more generic):

• Boot into Safe Mode.
• Log in as Administrator.
• Navigate to [FileYouWantToBlock.exe] in Explorer.
• Right click on it in explorer and select Properties -> Security -> Advanced -> Edit
• Select the option to not let it execute for all users.

[PhilB66]

Doug Knox Windows® XP Security Console does that.

[attach]

[Shades]

PhilB66 to the rescue!!   


@App103:
What you say makes sense, but as 'secpol.msc' appears to be the small little brother of 'gpedit.msc' I was thinking (or maybe hoping) that the small edition was included in XP Home Premium.

The oooops is completely on my side of the court

[MilesAhead]

Doug Knox Windows® XP Security Console does that.
(see attachment in previous post)

Wish somebody made one for Vista.  The best freebie I think I've seen so far for Vista is a utility called Shadow Explorer

The mechanism for shadow copies is there in the lesser versions of Vista(at least it's in Home Premium anyway) and this little GUI is like an undelete program.  Browses through dates of shadow copy sets until you find the file you want to restore.  Comes in handy occasionally for those of use without the Property Page that gets old versions of files.