Hi there,
I have been trying to figure this out for some time, but I've not been able to get this policy working till now.
Due to our security requirements, I have been tasked with locking down any USB storage devices from running applications. Thus far, I have configured the policy with the following settings.
Application Control:
I have configured each one to block .exe applications from running from media devices as well as .msi's. However, this doesn't seem to work. I've tried both USB and DVD's and these applications still run, despite the fact that I have specified specific drive letters and specific extensions.
This seems to work fine on Win 7 machines, but I've not found any documentation about Win XP being a problem.
Any suggestions would be appreciated.
Cheers, and thanks.
LMM05