+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 31
How do you do....it? Thread, Students are installing IM apps to their home folder in Technical; You can quickly apply the deny execute special permission to the students group to the home folders, this way they ...
  1. #16
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: Students are installing IM apps to their home folder

    You can quickly apply the deny execute special permission to the students group to the home folders, this way they cannot execute software from the home shares.

    However, setting up software restriction policies is essential, i think i may have gone overkill in my setup of SRP however no one, thats no one can install anything i dont allow

  2. #17

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Students are installing IM apps to their home folder

    If you remove the execute permission from folders you can't open them. Make sure you only remove the execute permission on files.

  3. #18
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: Students are installing IM apps to their home folder

    :-O i didnt know that

  4. #19

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Students are installing IM apps to their home folder

    XP SP2 has no outbound protection. There's API's that the program running on the machine can use to open ports for incomming connections. So no, its no help.

  5. #20

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    Boston, MA
    Posts
    7,597
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: Students are installing IM apps to their home folder

    There's also the Becta-preffered method of stopping this thing (although it's less effective) using School policies - threatening to remove an a-level kid's login will mean that they can no longer do their work and this effectively means they lose their place at the school.

    Speak to your SMT to see how policies could be implemented.

  6. #21
    Richie1972's Avatar
    Join Date
    Apr 2006
    Location
    Blackburn
    Posts
    239
    Thank Post
    2
    Thanked 6 Times in 6 Posts
    Rep Power
    19

    Re: Students are installing IM apps to their home folder

    We've used GPO and folder security settings (deny execution of files) to block running of exe's.
    You'll then find the kids will start running exe's from their USB drives (if, like us, you haven't blocked them from using USB drives).
    All we did then was install a program to make sure that their USB drive installed as Z:, Y:, or X: (in case they tried to install more than one drive) and prevented running of exe's via GPO.
    The little darlings will find ways around that, too, I'm sure

  7. #22
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,995
    Thank Post
    123
    Thanked 286 Times in 263 Posts
    Rep Power
    108

    Re: Students are installing IM apps to their home folder

    .... You say you installed a program? People want details

  8. #23
    Richie1972's Avatar
    Join Date
    Apr 2006
    Location
    Blackburn
    Posts
    239
    Thank Post
    2
    Thanked 6 Times in 6 Posts
    Rep Power
    19

    Re: Students are installing IM apps to their home folder

    I installed a piece of freeware called USB Drive Letter Management, which allows you to specifiy what letter a USB device gets when it is plugged in, then I crudely had to add into the Software Restrictions in GPO deny *.exe, then *.*\*.exe, then *.*\*.*\*.exe.... for a good few levels as there's no way to specify the whole drive. The students could get round it if they put an exe in a deep enough subfolder, but I'm hoping they'd give up before getting that far

  9. #24
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Students are installing IM apps to their home folder

    Quote Originally Posted by Richie_OLSJ
    I installed a piece of freeware called USB Drive Letter Management...
    Hmmm. Googling for "USB Drive Letter Management" returns a a big fat zero hits. Can you remember where you got it from?

  10. #25
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Students are installing IM apps to their home folder

    Would it be USBDLM (USB Drive Letter Manager)???

  11. #26

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,556
    Thank Post
    59
    Thanked 359 Times in 279 Posts
    Blog Entries
    7
    Rep Power
    132

    Re: Students are installing IM apps to their home folder

    Quote Originally Posted by Richie_OLSJ
    I installed a piece of freeware called USB Drive Letter Management, which allows you to specifiy what letter a USB device gets when it is plugged in, then I crudely had to add into the Software Restrictions in GPO deny *.exe, then *.*\*.exe, then *.*\*.*\*.exe.... for a good few levels as there's no way to specify the whole drive. The students could get round it if they put an exe in a deep enough subfolder, but I'm hoping they'd give up before getting that far
    I have to say, I think you're going about it back to front. Its much easier to deny everything then put in a whitelist of files you want run than it is to blacklist everything you don't want run. As long as you allow anything in Program Files and a couple of other choice directories (Kudos for example) you're laughing.

  12. #27
    Richie1972's Avatar
    Join Date
    Apr 2006
    Location
    Blackburn
    Posts
    239
    Thank Post
    2
    Thanked 6 Times in 6 Posts
    Rep Power
    19

    Re: Students are installing IM apps to their home folder

    There are all sorts of exe's running - yes, a lot in program files, but also other places - i'd rather not develop huge lists of programs to exclude from the list and simply block the areas where i know they shouldn't be running exe's

  13. #28
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: Students are installing IM apps to their home folder

    I'm sure I have added drive letters to Software Restriction Policies.......


    fooby

  14. #29
    Richie1972's Avatar
    Join Date
    Apr 2006
    Location
    Blackburn
    Posts
    239
    Thank Post
    2
    Thanked 6 Times in 6 Posts
    Rep Power
    19

    Re: Students are installing IM apps to their home folder

    You can add drive letters, however, something like: p:\*.exe only blocks exe's in the root, you have to specifiy a block on each level through the directory structure in software restrictions

  15. #30

    Join Date
    Dec 2007
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students are installing IM apps to their home folder

    Add a new path rule as follows to stop exe's etc from running in a users homefolder and subfolders:-

    %homeshare%*



SHARE:
+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast

Similar Threads

  1. Blocking ALL Executables in Students Home Directory
    By markwilliamson2001 in forum Windows
    Replies: 31
    Last Post: 9th March 2010, 09:51 AM
  2. Mass Home Folder Creation?
    By Blind in forum Windows
    Replies: 11
    Last Post: 1st September 2007, 09:05 PM
  3. Replies: 5
    Last Post: 9th May 2007, 06:45 PM
  4. Home Folder Shares
    By Gatt in forum Windows
    Replies: 19
    Last Post: 30th May 2006, 05:37 PM
  5. Easy Folder and File size viewer for students
    By altecsole in forum Windows
    Replies: 10
    Last Post: 29th November 2005, 11:03 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •