Hi
Thanks for the response.

We use group policy to stop users installing software onto the PC's.
When we have scanned the network we have found a number of PC's have had the Google Toolbar installed which we do not want. To remove the toolbar we have to log in as administrator and then un-install the software as general users do not have access to the control panel.

What I want to do is stop the Google Toolbar installation file from getting to the desktop. Stop it at the ironport so they cant install it.

Thanks
Stephen

Twofold,

After doing a little snooping, I discovered that the official google link for downloading the tool bar is:

------------------------------------------
dl.google.com/toolbar/T4/data/en//big/current/GoogleToolbarInstaller.exe
------------------------------------------

You can create a custom category that includes this and set it to deny. This will ONLY stop users that download the tool bar from the google site though.

I would recommend adding:

GoogleToolbarInstaller\.exe

to the custom category regex. This would stop downloads with this file name, but it will still not stop it if the executable were to be renamed.

I'm not sure of all of the ways the tool bar can be installed and it would be difficult to block them all, since it can only be blocked by destination. The google tool bar is bundled in with many other install packages (even iTunes, I believe), so desktop management will still be the most effective preventative measure.

Josh
Thanks for the information.

I also found that if it has been installed before and you try and download the toolbar again it goes to

Google_Updater.exe

So I have blocked both.
We are also talking to Microsoft and Google to find more info on how to stop it.