Locking-down command.com on network 1

[coleford]

Hi Guys

Anyone have suggestions as to how I might lock-down users ability to run scripts on the network?

In a Secondary School I have locked-down the desktops and all the usual, (W2k server - GP etc.), but the little blighters bring command.com in on a floppy - put it in their home folders and then write batch files to run on the network!!

Any suggestions as to how I might prevent this would be gratefully received.

Coleford

 

[TidyTrax]

Maybe not a viable suggestion, but you could just block access to the floppy drive via GP.

 

[NinjaBeaver]

Hi,

I'm also at a Secondary School. This probably is not the suggestion that you are after but the school has implemented a brilliant peice of software called WinSuite in which you can give access to the students to only run the programs that you give permission to access like Word etc. You can also quickly turn the Floppy Access on or off at will and password protect programs like Explorer.

 

[coleford]

Thanks for replies - disabling floppy is not possible and new software is not an option at present.

Any more for any more?

 

[spool]

Try these links.

http://www.the-it-mercenary.com/forums/Windows98/posts/4177.html

http://www.burtonsys.com/mike_advice.txt

http://archives.neohapsis.com/archives/sf/pentest/2003-05/0115.html

A small amount of help is better then none at all.
Spool