+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 24 of 24
Scripts Thread, arrrrggghh! vbs and quotes in Coding and Web Development; @Geoff traveller mode so that they can use it on their home pc. not have to install trucrypt on their ...
  1. #16
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    @Geoff

    traveller mode so that they can use it on their home pc. not have to install trucrypt on their own machine.

    @zerohour

    i'll have a look at autoit cheers

    still need to look at the group policy load driver permission thing

    cheers everyone

  2. #17

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,641
    Thank Post
    894
    Thanked 1,314 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    444
    Here is the code for autoit:
    Code:
    RunAsSet('{USER}', '{DOMAIN}', '{PASSWORD}',{Load profile 1=yes 0=no})
    RunWait('{PATH TO EXE WITH SWITCHES}')
    Exit

  3. Thanks to ZeroHour from:

    box_l (10th February 2009)

  4. #18


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,757
    Thank Post
    221
    Thanked 2,629 Times in 1,938 Posts
    Rep Power
    779
    Quote Originally Posted by box_l View Post
    yes please!
    Does it get the traveller mode for the USB stick working?
    BoX
    The CC3 package I created for TrueCrypt v6.1a can be downloaded from here. The best bit is that if you use all the files I included in the 'Traveller Disk' folder within the package folder on your USB flash drives, TrueCrypt will work for both restricted users at school (because the driver has already been installed as part of the package) and on staff home computers too (since TrueCrypt can also run directly from the USB flash drive). The AutoIt script I created to do this is also shown below.

    Mount.au3
    Code:
    #NoTrayIcon
    #AutoIt3Wrapper_icon=TrueCrypt\Icon.ico
    #AutoIt3Wrapper_Compression=4
    #AutoIt3Wrapper_Res_SaveSource=y
    
    $tc_hdd = '"' & @ProgramFilesDir & "\TrueCrypt\TrueCrypt.exe" & '"'
    $tc_usb = '"' & @ScriptDir & "\TrueCrypt\TrueCrypt.exe" & '"'
    $tc_switches = " /q background /cache y /history n /mountoption removable /explore /beep /v "
    $tc_volume = @ScriptDir & "\Encrypted.tc"
    
    If FileExists($tc_hdd) Then
    		Run(@Comspec & ' /c ' & $tc_hdd & $tc_switches & $tc_volume, "", @SW_HIDE)
    	Else
    		Run(@Comspec & ' /c ' & $tc_usb & $tc_switches & $tc_volume, "", @SW_HIDE)
    EndIf
    Autorun.inf
    Code:
    [Autorun]
    label=Encrypted Volume
    icon=TrueCrypt\TrueCrypt.exe,1
    
    action=Mount TrueCrypt Volume
    open=Mount.exe
    shell=Item1
    
    shell\Item1=&Mount TrueCrypt Volume
    shell\Item1\command=Mount.exe
    
    shell\Item2=&Unmount TrueCrypt Volume
    shell\Item2\command=TrueCrypt\TrueCrypt.exe /dismount /quit /silent /wipecache /beep
    
    shell\Item3=&Run TrueCrypt
    shell\Item3\command=TrueCrypt\TrueCrypt.exe
    
    shell\Item4=&Read Me
    shell\Item4\command=notepad.exe Readme.txt
    N.B. I have only tested this package on computers running Windows XP Pro SP2 since our CC3 network is XP only at the moment. I've included the Advanced Installer project file too, just in case you want to have a look at how I created the package or need to modify it to work on Windows Vista and 64-bit versions of Windows.

  5. 2 Thanks to Arthur:

    box_l (10th February 2009), PiqueABoo (9th February 2009)

  6. #19

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    Ah.. still have to prove to myself that there is a "which driver" issue, but that's essentially what I came here to suggest (look for tc on the system and run that if extant, otherwise try the penstick copy.)

    The bit that bothers me though is the collision between the risk of someone not encrypting something confidential because clicking say a shortcut to mount containers is jus too hard, and the risks of encouraging people to autoplay of USB sticks given it's now well-established use by malware.

    they might get a local admin passord
    And that will be very bad news unless you've got different ones for every machine- in which case how does it work when I go to another machine?
    Last edited by PiqueABoo; 9th February 2009 at 11:28 PM.

  7. #20
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    Arthur

    thats great! seems to be just what i need.

    i am guessing i cant use a cc3 package without cc3 so i will build my own msi

    piqueaboo

    i know, i just could not figure a way for a teacher to go to a non truecrypt domain machine where they are not a local admin and still get this to work.

    i will have to install to all machines on the school network for this to be fully usable. including all the student ones. i'll have to make sure the kids dont realise the software is there and encrypt things they shouldnt.

    thanks again Arthur

  8. #21

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    i just could not figure a way for a teacher to go to a non truecrypt domain machine where they are not a local admin and still get this to work
    I decided not to care about that scenario. If they can do it on org's boxes including teacher laptops and on their home machines that's good enough for me. Ultimately this is supposed to be work/business data - why do you need to access that from any box anywhere on the planet?

  9. #22

    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,168
    Thank Post
    98
    Thanked 319 Times in 261 Posts
    Blog Entries
    4
    Rep Power
    112
    Quote Originally Posted by PiqueABoo View Post
    I decided not to care about that scenario. If they can do it on org's boxes including teacher laptops and on their home machines that's good enough for me. Ultimately this is supposed to be work/business data - why do you need to access that from any box anywhere on the planet?
    Its not a problem scenario, its an undocumented security feature. You're restricting the machines where the data can be accessed to those you have authorized.

  10. #23
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    piqueaboo,

    lots of the teachers i support have two machines, one for home one for class.

    i had not planned on putting truecrypt on the machine that never leaves school, so was a bit stuck on how they would have used the traveller stick on a locked down machine with no trucrypt.

    i'll just have to install to all machines.

    BoX

  11. #24


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,757
    Thank Post
    221
    Thanked 2,629 Times in 1,938 Posts
    Rep Power
    779
    Box. My package will work for non-CC3 networks too. I didn't do anything special when I created the package that will only make it work on RM networks (I tried to copy what the official installer does as much as possible) so feel free to use it if you want.

    If you download the .exe from the link above and then extract the files to a folder you can then use the included .msi to install TrueCrypt to computers via Active Directory (or whatever method you normally use) and the files in the 'Traveller Disk' folder for your USB flash drives. When you install TrueCrypt from my .msi you will need to restart the computer so that the TrueCrypt driver starts properly.

    Edit. If you would like to modify my TrueCrypt package all you need to do is install TrueCrypt from my .msi on a clean PC, download the demo version of Advanced Installer and then open the included .aip project file. Make your changes to the package and then build the .msi again. Much simpler than starting from scratch.
    Last edited by Arthur; 10th February 2009 at 03:50 PM.

  12. Thanks to Arthur from:

    box_l (10th February 2009)

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Replies: 5
    Last Post: 13th August 2009, 12:56 PM
  2. [Joke] Real-life Dilbert manager quotes
    By somabc in forum Jokes/Interweb Things
    Replies: 2
    Last Post: 18th December 2008, 03:56 PM
  3. Unsolicited quotes from Internet Business Index
    By sparkeh in forum General Chat
    Replies: 7
    Last Post: 1st November 2008, 06:50 PM
  4. WinOS upgrade - quotes required : recommendations?
    By contink in forum Educational Software
    Replies: 5
    Last Post: 6th May 2008, 10:58 PM
  5. VBS Tutorial
    By Nij.UK in forum Coding
    Replies: 15
    Last Post: 25th November 2006, 12:01 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •