Physical Security Thread, How can i stop users from running bat files from memory sticks in Technical; We wish to use some design software by Prodesktop but to use this software I have to enable command prompt ...
7th October 2010, 11:32 AM #1
How can i stop users from running bat files from memory sticks
We wish to use some design software by Prodesktop but to use this software I have to enable command prompt script processing. Although from the servers .bat files have being blocked students are able to logon the network and run these types of files from there pen drive potentially allowing them to get to command prompt and run all kinds of problems!
Does anyone know of a way through group policy where i can stop .bat files from being run on pen drives.
I would be graetful of the assistance as I need to install this software a.s.a.p
IDG Tech News
7th October 2010, 12:52 PM #2
Your answer is here Post #19 of this thread explains how to do what you want using GPO's. I've implemented this and it works fine.
12th November 2010, 06:55 PM #3
I do it in the same way with USBDLM and user based software restrictions policies. Important to remember that the number of driver letter you configure using USBDLM must be at least equal to the maximum number of USB ports that your computers have. If you've set up 3, then the 4th memory stick that is inserted will not be covered by restriction. Also watch out for built-in card readers using USBDLM drive letters.
15th November 2010, 02:39 PM #4
- Rep Power
USBDLM can be configured to assign "no letter" too:
Originally Posted by morganw
This way the first three USB drives get letters X, Y and Z. Additional drives get no drive letter. Counting USB ports is not good enough beause one USB device can have multiple drives (as multislot cardreaders) or multiple partitions (USB harddrives). And the user could attach a USB hub...
Last edited by uwe-sieber; 15th November 2010 at 02:56 PM.
9th October 2011, 08:51 PM #5
the other thing to do of course being to block memory sticks!! I know of a few schools that have done this now as they were getting too many virus problems.
Quite a few places now have got halfway there and blocked them for pupils and allowed them for staff but supplied secure sticks for staff and only allowed those certain ones!
Thanks to mtillbrook from:
nephilim (9th October 2011)
9th October 2011, 08:53 PM #6
@mtillbrook is right, blocking memory sticks would be the way to go, you can get small vents to cover over where they would slot in, or you can disconnect them from the motherboard. Either option works well
9th October 2011, 09:12 PM #7
Hi Uwe, welcome to edugeek.
Lots of people using your software on this forum, me included.
Thanks for USBDLM, it has made thing so much easier.
By jonathanhaddock in forum Windows
Last Post: 25th June 2010, 02:09 PM
By marc2510 in forum Scripts
Last Post: 2nd April 2010, 04:04 PM
By karldenton in forum General Chat
Last Post: 19th November 2009, 04:22 PM
By apeo in forum How do you do....it?
Last Post: 8th May 2007, 01:37 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)