Restricting certain file types for download

For general issues related to PWB v2.

Moderators: Tyler, Scott, PWB v2 Moderator

Post Reply
ramone_johnny

Restricting certain file types for download

Post by ramone_johnny »

Hi guys,
Im looking for information on how to restrict exe, bat and com files from being downloaded.

Im assuming that [RestrictedSaveApp] may be related but Im unsure.

Could anyone help with this?

John

ramone_johnny

Post by ramone_johnny »

Errr, is it this I need?

ManageDL/TDownload

I cant see it on the download page?

John

ramone_johnny

Post by ramone_johnny »


Scott
Site Admin
Site Admin
Posts: 2530
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

Just keep in mind, ManageDL/TDownload works well for websites that do not use cookie or session based authentication such as Hotmail.

This may be what you are looking for.
http://www.teamsoftwaresolutions.com/ph ... .php?t=338

We are still working on a better solution that intergates better with the normal IE save routines.

--Scott

ramone_johnny

Post by ramone_johnny »

Thanks Scott,
In addition to this, there is a group policy that you can assign which will infact allow downloads, but restrict to what can actually be installed or run on the local system.

We have successfully tested this on a domain controller running Windows Server 2003, Active Directory, clients XP Pro.

Group Policy...

Windows Settings > Security Settings > Software Restrict Policies > *right click* New Software Restrict Policy

From there simply set the desired restriction on COM, BAT, EXE etc files and assign the enforcement rule.

The behaviour at the client results in the download taking place, but not running. Basically it just goes away. Please note we havent tested this extensively.

Hope this helps others.

John

Post Reply