Actually, we're not doing folder redirection in this case. I'm just toying with some additional SRPs to possibly prevent malware from being able to run.
It looks like %userprofile%\whatever will achieve what I'm try to accomplish. Many thanks to all who replied. Richard On Thu, Jun 5, 2014 at 11:13 AM, Miller Bonnie L. < [email protected]> wrote: > Not sure why the first one works at all, but the second looks okay. > Assuming you are doing this because you are using folder redirection on the > downloads folder, shouldn’t it be > > > > %homedrive%%homepath%\downloads\*.exe > > > > Instead? > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Richard Stovall > *Sent:* Thursday, June 05, 2014 7:50 AM > > *To:* [email protected] > *Subject:* [NTSysADM] Quick SRP question > > > > Any idea why the following path rules work: > > > > %homepath%\*.zip\*.exe > > %userprofile%\downloads\*.exe > > > > And this one doesn't? > > > > %homepath%\downloads\*.exe > > > > > > ---- > > > > I can accomplish what I'm trying to do, but I don't understand why the > last one allows .exe files to run from the user's downloads folder. >

