Windows 7 Thread, Chrome and Firefox can be run without download in Technical; Hi,
We have banned the use of Chrome and Firefox in our school due to its ability to allow students ...
27th January 2014, 08:44 AM #1
- Rep Power
Chrome and Firefox can be run without download
We have banned the use of Chrome and Firefox in our school due to its ability to allow students to see the C drive and other parts of the network that IE doesnt allow. Friday we had an incident where students have found out that they can run Chrome and Firefox on their system without downloading. I tried it out this morning and it does work, if I click run instead of save Chrome ran and was accessible. Once I had logged off and logged back on it was no longer there.
Does anyone know how i can prevent this from happening?
27th January 2014, 08:56 AM #2
There's a few options for this:
1. Don't block Chrome and Firefox
2. Use a tool such as Impero or Securus to block any window with "Chrome" or "Firefox" in the title
3. Use group policy and FSRM to block exes from running on student drives, desktops and memory stick (combined with USBDLM to control where USB sticks appear)
27th January 2014, 09:18 AM #3
- Rep Power
I would go for a Software Restriction Policy to restrict any .exe's running from the directory where it is located which is probably a temp downloads folder.
27th January 2014, 09:33 AM #4
Block exe downloads on your proxy. Cut off the source.
Thanks to free780 from:
Oaktech (27th January 2014)
27th January 2014, 09:33 AM #5
You could block chrome.exe and firefox.exe via GPO... We had a similar thing the other week, and it appears, regardless of what the exe is called, the processes are still chrome.exe and firefox.exe so the block still works.
Failing that, Impero or some other monitoring tool as already mentioned.
Worth noting, that if you install the chrome gpo extensions, you can lock it down pretty well, allowing it to be used.
30th January 2014, 07:20 PM #6
Had similar issues with students running portable versions of browsers and UltraSurf from their home directories and key chains - App Locker policies put an end to it. Of course you're going to need to be running Windows 7 Enterprise to use this; Professional does not support it.
31st January 2014, 06:02 AM #7
To prevent students browsing all local and network drives in Google Chrome, simply add file://* to the URL blacklist policy (after the ADMX templates have been added to your Group Policy Central Store).
Originally Posted by sadams1980
Deploying Chrome may make the students less likely to look for alternative browsers.
I would also do what others have suggested above and block EXEs on your proxy, through AppLocker and FSRM.
Last edited by Arthur; 31st January 2014 at 06:09 AM.
31st January 2014, 11:02 AM #8
Wouldn't that screw up the kids making web pages in IT? (I don't know the specifics of the school, but I assume it's secondary if the kids are computer literate enough to download replacement browsers)
Originally Posted by Arthur
Realistically there's zero reason kids should be allowed to download .exe's (doesn't RUN still count as a download? I may be wrong..), so disallowing that would be my first port of call in this situation.
Also I'd block the execution of .exe's from their homedrives and temp locations/appdata to ensure they didn't download the exe inside a zip and run it from there, this should also deny 'Run' as it still to my knowledge) downloads it to temp and then executes it.
For good measure, I'd also lock down the C:\ drive with NTFS permissions to ensure nothing can be written there by student accounts (it's possible they may have 'hidden' other programs or such there, if they were downloading things via Chrome)
It goes without saying that exe's from memory sticks ought to be disallowed, too, to stop portable versions brought in from home.
Last edited by Garacesh; 31st January 2014 at 11:09 AM.
31st January 2014, 06:27 PM #9
- Rep Power
We use ABTutor in school so I blocked all applications with chrome and Firefox in the name. ABTutor is amazing for the money can't praise it enough.
By Tricky_Dicky in forum MIS Systems
Last Post: 26th October 2011, 11:26 AM
By p858snake in forum Windows 7
Last Post: 3rd March 2011, 06:17 AM
By edutech4schools in forum Internet Related/Filtering/Firewall
Last Post: 13th December 2010, 11:00 AM
By mattx in forum EduGeek Admin Bar
Last Post: 22nd October 2008, 01:12 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)