Topic: Please dont flame me :)

[gbentley]

OK I know this isnt really the place but theres a lot of talent and experience here - and I cant find this by googling !

Does anyone know how to stop XP from restoring explorer.exe ?

I wanted to rename it on some machines to prevent users browsing the web all afternoon but if you
rename it - the system just puts another one back
there - annoying !

[Schotty]

Why not set user rights on the exe so that the users cannot use it??

[Schotty]

Why not set user rights on the exe so that the users cannot use it??

[gbentley]

Ok I will come clean - I wanted to use a s/ware that adds a small amount of code to Windows .exe's which asks for a password when the program is launched.

The s/ware renames the original and writes the modified version in its place.

It works a treat on all but iexplorer because the system knows its been tamprered with and restores another a new one over the moded one.

If there is another way of asking for a password
when starting iexplorer (so that a supervisor has to
type it in per session) please let me know

[mbachmann]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]
"1"="whatyouwant.exe"

prevents it from running for the current user.

Then you set permissions on ie to Admin and if the user wants to run it, you choose Shift RMB "execute as ...", this asks you for the admin password.

[del]

I use Winguard Pro,works great for me and can be downloaded here: http://www.winguardpro.com/
Regards,
Del

[Tudor36]

to answer your first question windows keeps a copy of critical files.  this might be one.  I can not remember where they are but they are in the winnt dir.  they are there for another line of defensse as you saw.

[pen25]

why not set the machine to proxy then disallow internet via the proxy?? this is why you have an sme machine no??