Complicated Registry question

Discussion in 'Software' started by SgtRedneck, Nov 25, 2009.

  1. SgtRedneck

    SgtRedneck Private E-2

    Hi guys/girls

    I have a question about the registry
    What I want to do is set the registry up to delete a file from a computer if it turns up
    specifically halo :D
    I've got kids at my school playing halo off of a usb drive when they aren't allowed to (rather then block their account and cut off their internet/computer access) I want to set windows to delete halo.exe if it gets run Is there a way to get the registry to do it.
    I've been searching around on the internet but I can't seem to find it

    Would be really cool if you could help me out
    oh BTW. Windows XP PR0 SP2 on a Win2k3 Server domain
    I've got admin rights so I can setup a batch file to run or something like that but It would be easier if I could just put some entries into the registry for all users :D
    Regards

    SgtRedneck
     
  2. techsent

    techsent Corporal

  3. Adrynalyne

    Adrynalyne Guest

    Thats not possible via the registry.

    The registry is merely a collection of settings, not something that monitors, scans, or modifies itself during certain conditions.

    Surely there is a program out there that is able to monitor for certain files and delete them.
     
  4. ~Q~

    ~Q~ Command Sergeant Major

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Suggestion: Instead of deleting, don't let it run. Figure out the name of the file that runs. Like halo.exe and setup a Software Policy that does not allow it to run. You run the Group Policy editor by clicking Start, Run, and entering gpedit.msc and clicking OK.

    1. Expand User Configuration, expand Administrative Templates, and then expand System
    2. In the right pane, double-click Don’t run specified Windows applications
    3. Click Enabled, and then click Show
    4. Click Add, and then type the executable file name of the program(halo.exe or whatever the name is) that you want to restrict users from running.
    5. Click OK, click OK, and then click OK (NOTE: If domain-level policy settings
      are defined, they may override this local policy setting.)
    6. Quit Group Policy Object Editor
    7. Restart the computer
     
  6. SgtRedneck

    SgtRedneck Private E-2

    Hey.

    Just tested that on my machine.. Fantastic Will apply it to the "few" machines that they have access to locally.. hopefully the domain policies wont over right it.. If they do.. I'll just change the domain ones :D


    Thanks for all the other replies..I'm going to look at that as well :D
     
    Last edited: Nov 26, 2009
  7. sach2

    sach2 Major Geek Extraordinaire

    Don't forget this part. Kids have nothing better to do than figure out ways around the rules. :p
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds