Anilrgowda

Question: some users in my lab are downloading exe files and hacks from the internet which kills processes in XP - such as anti viral processes. How can i stop such downloads OR prevent it from executing after they have downloaded it. any suggestions?

Anilrgowda

Soln
One page to add to tim_gui's links:
How to restrict downloading programs with Internet Explorer

If this is an academic environment using a server/workstation arrangement, then the following should have been in place:

1. A "responsible use" agreement signed by each user specifying what is permissible, and the consequences of failing to comply
2. Group Policies which can be used to prevent specific activity by specified user groups or individual users.

Group Policy for Windows XP Professional
How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP
Changes to Group Policy behavior after installing Windows XP Service Pack 2

Managing Windows XP Service Pack 2 Features Using Group Policy:Introduction

http://download.microsoft.com/downlo...cySettings.xls

You also have the Internet Explorer Administration Kit (IEAK) at your disposal:
Microsoft TechNet: Microsoft Internet Explorer 6 Resource Kit

This registry modification can be used to restrict access to the Windows Installer so that users won't be able to execute a setup package that uses it:
Disable Windows Installer at Registry Guide for Windows

Disables the Right-Click > "Run As ..." option:
Hide the Run as... option from the context menu at Registry Guide for Windows

After reissuing all users with a hardcopy policy of use and telling them that contraventions will be treated as gross misconduct, I would disable the ability of all users to download ANYTHING until it sinks in:
Disable File Download in Internet Explorer at Registry Guide for Windows

You could relax it after a while and monitor user activity closely to isolate the culprits.