Is there a way to prevent certain extensions from being executed via GPO. We had an incident where user executed a .scr file that was infected.
Is there way to prevent any SCR file from running via GPO.
I tried using *.SCR in the Don't Run Specified Windows Programs but I don't think it likes the * in there.