How to set software restriction policies programatically

Question

I would like to add software restriction policies programatically using c#. For example: Add and additional rule to disallows paint.exe to run.

Unfortunately I don't have the slightest idea how I could achieve this in c#

Thx in advance, Tom

Answer 1

you can use the RSoP WMI classes with WMICodeCreator to update the group policy.

you could also exec gpupdate.exe directly or tweak the registry.

these xml policies can be useful:

http://www.microsoft.com/downloads/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en