+ Post New Thread
Results 1 to 7 of 7
Physical Security Thread, How can i stop users from running bat files from memory sticks in Technical; We wish to use some design software by Prodesktop but to use this software I have to enable command prompt ...
  1. #1
    gaz003's Avatar
    Join Date
    Feb 2010
    Location
    UK
    Posts
    40
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Question How can i stop users from running bat files from memory sticks

    We wish to use some design software by Prodesktop but to use this software I have to enable command prompt script processing. Although from the servers .bat files have being blocked students are able to logon the network and run these types of files from there pen drive potentially allowing them to get to command prompt and run all kinds of problems!

    Does anyone know of a way through group policy where i can stop .bat files from being run on pen drives.

    I would be graetful of the assistance as I need to install this software a.s.a.p

    Regards
    Gareth

  2. #2

    Join Date
    Jun 2010
    Posts
    198
    Thank Post
    9
    Thanked 25 Times in 24 Posts
    Rep Power
    21
    Your answer is here Post #19 of this thread explains how to do what you want using GPO's. I've implemented this and it works fine.

  3. Thanks to kili from:

    talksr (5th April 2011)

  4. #3
    morganw's Avatar
    Join Date
    Apr 2009
    Location
    Cambridge
    Posts
    816
    Thank Post
    46
    Thanked 132 Times in 126 Posts
    Rep Power
    40
    I do it in the same way with USBDLM and user based software restrictions policies. Important to remember that the number of driver letter you configure using USBDLM must be at least equal to the maximum number of USB ports that your computers have. If you've set up 3, then the 4th memory stick that is inserted will not be covered by restriction. Also watch out for built-in card readers using USBDLM drive letters.

  5. #4

    Join Date
    Mar 2010
    Location
    Germany
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by morganw View Post
    I do it in the same way with USBDLM and user based software restrictions policies. Important to remember that the number of driver letter you configure using USBDLM must be at least equal to the maximum number of USB ports that your computers have. If you've set up 3, then the 4th memory stick that is inserted will not be covered by restriction. Also watch out for built-in card readers using USBDLM drive letters.
    USBDLM can be configured to assign "no letter" too:

    [DriveLetters]
    Letters=X,Y,Z,-

    This way the first three USB drives get letters X, Y and Z. Additional drives get no drive letter. Counting USB ports is not good enough beause one USB device can have multiple drives (as multislot cardreaders) or multiple partitions (USB harddrives). And the user could attach a USB hub...

    Uwe Sieber
    Last edited by uwe-sieber; 15th November 2010 at 01:56 PM.

  6. #5

    Join Date
    Jan 2010
    Location
    Slough
    Posts
    110
    Thank Post
    21
    Thanked 5 Times in 5 Posts
    Rep Power
    20
    the other thing to do of course being to block memory sticks!! I know of a few schools that have done this now as they were getting too many virus problems.

    Quite a few places now have got halfway there and blocked them for pupils and allowed them for staff but supplied secure sticks for staff and only allowed those certain ones!

  7. Thanks to mtillbrook from:

    nephilim (9th October 2011)

  8. #6

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,037
    Thank Post
    1,633
    Thanked 1,938 Times in 1,422 Posts
    Blog Entries
    2
    Rep Power
    437
    @mtillbrook is right, blocking memory sticks would be the way to go, you can get small vents to cover over where they would slot in, or you can disconnect them from the motherboard. Either option works well

  9. #7
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    69
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    Hi Uwe, welcome to edugeek.

    Lots of people using your software on this forum, me included.

    Thanks for USBDLM, it has made thing so much easier.

    BoX

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 9
    Last Post: 25th June 2010, 01:09 PM
  2. Stop users from running .vbs
    By marc2510 in forum Scripts
    Replies: 9
    Last Post: 2nd April 2010, 03:04 PM
  3. Need some Memory Sticks
    By karldenton in forum General Chat
    Replies: 4
    Last Post: 19th November 2009, 03:22 PM
  4. Stop users closing bat/cmd shell at logon
    By apeo in forum How do you do....it?
    Replies: 10
    Last Post: 8th May 2007, 12:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •