+ Post New Thread
Results 1 to 14 of 14
How do you do....it? Thread, Prevent Student Access To Command Prompt in Technical; Removed....
  1. #1

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,775
    Thank Post
    351
    Thanked 1,274 Times in 870 Posts
    Blog Entries
    4
    Rep Power
    1126

    Prevent Student Access To Command Prompt

    Removed.

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Prevent Student Access To Command Prompt

    Stop students from accessing word?

  3. #3

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Prevent Student Access To Command Prompt

    Not sure on a vanilla network, but anyone running ranger can do a title bar search on this, as I believe command prompt will still run with 'C:\windows\command.com' in the title bar, so program this in and as soon as ranger sees that in the title bar of a program it will close it.

    Can't think of an immediate way with active directory, but I'm sure there is.

    Mike.

  4. #4

    Join Date
    Jan 2007
    Location
    Durham, UK
    Posts
    328
    Thank Post
    33
    Thanked 17 Times in 12 Posts
    Rep Power
    20

    Re: Prevent Student Access To Command Prompt

    Wont the setting in the GPO do it,
    User Configuration > Administrative templates > Sytem > Prevent access to the command prompt.

    Or User Configuration > Administrative templates > Sytem > Dont run specified windows applications?

    Jack

  5. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Prevent Student Access To Command Prompt

    Not sure on a vanilla network, but anyone running ranger can do a title bar search on this, as I believe command prompt will still run with 'C:\windows\command.com' in the title bar, so program this in and as soon as ranger sees that in the title bar of a program it will close it.
    Stick the following in the nearest windows run box:

    Code:
    cmd /c start "wibble.exe" cmd

  6. #6
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    33

    Re: Prevent Student Access To Command Prompt

    Have you tried setting up software restriction policies in a GPO to block this? You may have difficulties if your login scripts run as a batch file although I'm guessing they don't.

  7. #7

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Prevent Student Access To Command Prompt

    Quote Originally Posted by Geoff
    Stick the following in the nearest windows run box:

    Code:
    cmd /c start "wibble.exe" cmd
    Ah but Ranger should stomp on the window of the original command window before it launches the second one.

    Also the wibble command window stills shows executed commands in the titlebar.

  8. #8

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Prevent Student Access To Command Prompt

    Quote Originally Posted by DaveP
    with properties that students cannot access them, but System can. I suppose that is why it works [Because the System is making the call to cmd.exe from inside Word, not the Student, if that makes sense] I dont think that I can deny access to System, so how do I prevent student doing this before it becomes a rash all over my network?
    This can't be true or one of your students has just discovered a very serious security vulnerability in Microsoft Office.
    System is the Windows equivalent of the root user in Unix. If someone one can get to run a command shell in the System context they own the box, game over, end of story.

    The only protection might be to disbale unisgned macros from running in Word. Alternatively you can use a disk protection product like Deep Freeze or Microsoft's Shared compuer toolkit.

  9. #9

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,775
    Thank Post
    351
    Thanked 1,274 Times in 870 Posts
    Blog Entries
    4
    Rep Power
    1126

    Re: Prevent Student Access To Command Prompt

    Removed.

  10. #10

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,775
    Thank Post
    351
    Thanked 1,274 Times in 870 Posts
    Blog Entries
    4
    Rep Power
    1126

    Re: Prevent Student Access To Command Prompt

    Quote Originally Posted by Jackd
    Wont the setting in the GPO do it,
    User Configuration > Administrative templates > Sytem > Prevent access to the command prompt.

    Or User Configuration > Administrative templates > Sytem > Dont run specified windows applications?

    Jack
    Hi Jack,

    Both restrctions already in place.

  11. #11
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    364
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    25

    Re: Prevent Student Access To Command Prompt

    ops:

  12. #12

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,775
    Thank Post
    351
    Thanked 1,274 Times in 870 Posts
    Blog Entries
    4
    Rep Power
    1126

    Re: Prevent Student Access To Command Prompt

    Removed.

  13. #13
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    364
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    25

    Re: Prevent Student Access To Command Prompt

    ops:

  14. #14

    Join Date
    Oct 2006
    Location
    Robert Mays School, Hampshire
    Posts
    100
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Prevent Student Access To Command Prompt

    Report it to Viglen....

    it's a flaw in Classlink and they should be dealing with it, you have paid all that money after all!

SHARE:
+ Post New Thread

Similar Threads

  1. Student Laptops / Domain access...
    By Ben_Stanton in forum How do you do....it?
    Replies: 8
    Last Post: 3rd May 2007, 09:36 PM
  2. External student email access
    By Norphy in forum How do you do....it?
    Replies: 30
    Last Post: 10th November 2006, 12:24 AM
  3. Moodle:Parental Access to student work
    By TechMonkey in forum Virtual Learning Platforms
    Replies: 7
    Last Post: 3rd November 2006, 07:54 PM
  4. Student remote access....groan!
    By Cowman in forum Wireless Networks
    Replies: 42
    Last Post: 2nd November 2006, 09:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •