restricting domain users from executing .exe file from their z drives

[devil786]

#154983

Hi all,
We are using Windows server 2008-R2 as our primary domain users. Users Z driveshome drives are mapped on SAN. i want to restrict all users from executing .exe files from their home drives, FYI I restrict users from running exe and shortcut from z-drives and it work well using below path rule.
\IPsharename$**.exe
\IPsharename$**.lnk
But users can run exe and shortcuts from subfolders.For example user cant run exe from \SANIPsharename$userid but can run exe from
\SANIPsharename$userhomedriveabc

does any body know how to stop users from such activity?

[Author]

Posts