+ Post New Thread
Results 1 to 9 of 9
Scripts Thread, Kids Running VBS files in Coding and Web Development; The kids have currently worked out how to create vbs scripts in notepad and are running them. the current one ...
  1. #1
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22

    Kids Running VBS files

    The kids have currently worked out how to create vbs scripts in notepad and are running them. the current one is a message box that pops up and displays the message, you have a virus.

    I cant seem to figure out how to stop them running.

  2. #2

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499
    You can turn VBScripts off in Group Policy (think its the SRP Policy been that long since i set it up!)

  3. #3
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22
    I have just looked here

    http://www.microsoft.com/technet/scr....mspx?mfr=true

    Does anyone know if this would work, but not disable any logon scripts that we have in place for printers and mapped drives.

  4. #4

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,807
    Thank Post
    3,320
    Thanked 1,056 Times in 977 Posts
    Rep Power
    365
    you could create a test OU in ADUC and put one machine in that OU and apply that group policy to that one OU and test to see if applied vb scripts ie applying printers and such like work or not.

    If not then it is obvious that disabling wsh disables it altogether and if it still works then just to double check ensure that you do gpupdate /force and shutdown and turn it back on, log back on as a students account ( which can be a dummy account in a student OU ) and try it.

  5. #5

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499
    Think i had to add an allow rule to SRP to allow all from the NETLOGON directory..

  6. #6
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22
    whats srp? also i was thinking of adding a deny permission for the global group the students are in for the file wscript.exe, as i think this allows vbs scripts to run.
    Last edited by tomscaper; 8th January 2008 at 02:49 PM.

  7. #7
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19
    SRP stands for software restriction policies

    http://www.google.com/search?hl=en&c...es&btnG=Search

    this search will show you about it all and help get an understanding of it uses.

    http://www.windowsnetworking.com/art...-Policies.html

    this is good too

    its been covered a few times in the forums here (I know, I posted in most of them )

  8. #8

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499
    Quote Originally Posted by tomscaper View Post
    whats srp? also i was thinking of adding a deny permission for the global group the students are in for the file wscript.exe, as i think this allows vbs scripts to run.

    You'll need to allow access wscript.exe, in order to let VSB run - this is the problem i encountered at first.

    My SRP is set to block VBScripts in the designated File Types section under User Config, then in the actual Rules section allowing wscript.exe to be executed, along with all files that I store in the NETLOGON directory
    Last edited by Gatt; 9th January 2008 at 07:50 AM. Reason: typo's galore!

  9. #9

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Pupil Policy

    Tom, here's a copy of my policy for you to make use of..
    Attached Files Attached Files

  10. Thanks to Gatt from:

    tomscaper (5th June 2008)

SHARE:
+ Post New Thread

Similar Threads

  1. how do you stop kids from running exe from IE.
    By timbo343 in forum Windows
    Replies: 15
    Last Post: 8th January 2008, 02:14 PM
  2. Running batch files in vista
    By Kained in forum Windows Vista
    Replies: 6
    Last Post: 4th September 2007, 02:25 PM
  3. Kids saving notepad files as command.bat
    By Kyle in forum Windows
    Replies: 15
    Last Post: 29th November 2006, 01:27 PM
  4. Stop kids running programs from their USB key
    By timbo343 in forum Windows
    Replies: 8
    Last Post: 28th September 2006, 02:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •