How to lock CDrom ?? Prevent software installs ? 11

[protos]

How can you lock the cdrom
so users cannot install software/games

then at the end of the day, uninstall them ??

i need to do this ASAP for 1 user, but probably long term for others later.

thanks

 

[pctekk]

OK here is another,

how can you remove the Games that is installed on win2k/xp ??
Remotely of course

Can you also check machines remotely too see which ones still have them installed ??

apparently some folks have reloaded them and we need to uninstall and prevent reinstallation.

Thanks Gang !!!

 

[deecee]

wherever you work are they hiring??? [Hammer]
Nike Failed Slogans -- "Just Don't Do It!"

 

[browolf]

we have that problem on our network

if it's specific games, then you can find the m by connecting thru admin shares and then put a line in the logon script to remove the folders and start menu folders.


if the games use installshield you can use psexec tools to get a remote command prompt
and then run isuninst silently

c:\psexec \\compname %comspec%
then
look here:
How To Use IsUninst.exe In Silent Mode

http://appdeploy.com/tips/detail.asp?id=16

you could also put the uninstall commandline in the login script

if you want to catch ppl playing them
you need a text file with all the comp names in e.g. net view | find "\\" >>comp.txt

then something like:
mybat.bat:
@echo off
:loop
for /f %%a in (comp.txt) do pslist %%a | find "gamename.exe" && echo %%a
goto loop

in mine instead of echo %%a it mails me using the dos cmdline mailer blat.

but all this is like "after the fact", to stop them you either have to tighten policies or block the files at proxy, if possible, if users are downloading them.

psexec and pslist can be found here:

http://www.sysinternals.com/ntw2k/freeware/pstools.shtml

pskill is also handy for remotely killing processes. ===============
Security Forums

http://www.security-forums.com

 

[pctekk]

OK now its getting anoying,

I did a Shift + DEL in windows 2000 on the users machine
for
sol.exe (the solitaire game)
and it was recreated automatically.

HOw can you remove it permanently ??

 

[doomhamur]

if you want to remove it permanetly, go to start/settings/control pannel/add-remove programs/ windows components and unistall the games from there.

be sure to implement the GPO settings i said to keep new installs from happening from happening. And the auditing to find them out.

Also, If you really want to lock things down, you can use this:

User Configuration > Administrative Templates > System > Run only allowed windows applications just enter the exe files of what they can run (word, excel, outlook) and that's it, nothing else will run (this is very draconian, check with management before you do this)

good luck Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[Beer4meok]

Can I get a star too Dave

 

[smactek]

Excellent Thread People! Another now added to my growing list in "How to do the seemingly impossible, In Windows" Cheers to You and Yours, SMac "Never Argue with an Idiot. They will Lower You to Their Level, Then Beat YOU with Experience"

 

[NADIAZIPPER]

I know this is late, but it may help others. The best way to lock done XP is to add your user to the Power Users group.Then go into gredit and add power users to "unload and load device drivers. This way they can still do their daily duties, but can not run any install programs, adjust user securities, add/remove any promgrams , etc. Yet all you need to do is choose right click and "ran as" the administartor and you will be able to run most programs. I also use a great program called Dameware for remote issues. You can change all sorts of setting including adding them to the power user group without them knowing. It is also a great remote connection program.

 

[protos]

I have and use dameware, but havent got into those settings,
where can you change/add user to groups remotely ??

it's a great remote program !!

btw... i also wanted to keep them from add/remove the built in Games

thanks Zipper