Restricted users are able to run applications from within their home area if they use compressed folders

Question

How do I stop restricted users from being able to run applications from within compressed folders?

Symptoms

Applications run from within a zip file or windows compressed folder bypass the 'path limitations' restrictions set on the users home area.

Cause

When you open a zip file or compressed folder the contents are placed in a temporary location. If the user runs an application from the extracted folder list the program runs from the temporary location and not from the users home drive. This means the path seen by Ranger is not that of the users home drive and therefore Ranger would not prevent the application from running.

Resolution

We have identified the locations used by windows and winzip for temporary file storage. To stop users from running applications from within compressed folders add the locations below to the groups 'path limitations'.

Instructions

Add the paths "local settingstemp" and "locals1temp" to the "path limitations" list

Testing

Try loading an application from a compressed folder or a zip file and see if the program is closed with a 'path limitation' warning.