Hello, ladies and gentlemen.
Following some problems with students installing and running malicious software off their USB drives, I've been trying to set up a Group Policy software whitelist to ensure that students can only run software that we've installed ourselves. It runs very well on our Windows 7 PCs, allowing our software and blocking everything else, but not on our XP PCs, where virtually all programs are blocked, even when I add an explicit rule to allow them. I have set the GPO rule to only allow listed program locations (like Program Files, etc.), and to block all others.
The domain controller is running 2008 R2. The XP PCs are up to date (comparatively speaking). I'm sure many people will recommend upgrading the OS on these PCs, and I certainly agree with you all, but my budget is measured in the tens of Euros right now (I'm sure you've seen the news about Cyprus' economic situation right now).
Does anybody know why this is happening, and what I can do to fix it, or any tests I can perform to get more information?
Thanks.
Oliver.