is it possible to limit executing executables [.exe .dll .cmd .bat .vbs ...]
by their location?
so not to allow executable to be invoked directly from any removable media
[cd, usb, floppy, network ...] just only from trusted & protected & secured
location like "c:\program files" are?
not even executable from user's folders "doc & sett"?

or is there some better method of securing xp from user trying to execute
some not approved foreign executable connected to system through removable
media?

thnx

Yes you can use Software Restriction Policies in XP Pro with path rules as
explained in the link below. --- Steve

http://www.microsoft.com/technet/pro.../rstrplcy.mspx
--- XP Pro Software Restriction Policies

"sali" <sali@euroherc.hr> wrote in message
news:%23%23x5XMy%23FHA.3064@TK2MSFTNGP10.phx.gbl.. .
> is it possible to limit executing executables [.exe .dll .cmd .bat .vbs
> ...] by their location?
> so not to allow executable to be invoked directly from any removable media
> [cd, usb, floppy, network ...] just only from trusted & protected &
> secured location like "c:\program files" are?
> not even executable from user's folders "doc & sett"?
>
> or is there some better method of securing xp from user trying to execute
> some not approved foreign executable connected to system through removable
> media?
>
> thnx
>