We frequently update a software application and the old version sometimes causes issues. I am trying to create a group policy that will block old software versions and am looking at the best way to accomplish this. Thoughts and or suggestions appreciated.
Right now the solftware version is store in a registry key which I can look at.
I though about hash rules but this would mean I would need to maintain old versions to grab the hash.
What would be the easiest way to do the following...
Software exe has deny access applied if reg key version does not equal x, y or z? and where would I set this in the GPO. My goal is to only allow stable versions to operate in my environment and if a computer slipped by the upgrade and is an old version then access to the file would be denied, thus prevent users from inadvertently running the software.
Thanks
John