Hi, I have installed VB script for a sales program on all the systems; this script uses Access as the database. This program runs fine on systems which run only this software, but there are lots of issues on systems which run other programs on the background like games, Facebook etc. How can we avoid users using these applications?
The easy answer is to lock down the client and prevent the user from doing anything else on the machine. Set up local policy to prevent non-administrators from running anything other than the HASH of your program. Start -> Run -> "secpol.msc" In Local Security Settings configure a Software restriction policy as follows.
(This is for XP, you might need to modify for different OS):
Right click on Software restriction policy and select create a new policy.
Double click Enforcement and chose "all users except local administrators"
Under the Security Levels select "disallowed" by double clicking "disallowed" and click set as default.
Under right click additional rules and click "new hash rule…"
browse for the file of your VB app.
Change Security level to "Unrestricted"
Create a new user account and change the local admin password.
