+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Chrome and Firefox can be run without download in Technical; Hi, We have banned the use of Chrome and Firefox in our school due to its ability to allow students ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10

    Chrome and Firefox can be run without download

    Hi,

    We have banned the use of Chrome and Firefox in our school due to its ability to allow students to see the C drive and other parts of the network that IE doesnt allow. Friday we had an incident where students have found out that they can run Chrome and Firefox on their system without downloading. I tried it out this morning and it does work, if I click run instead of save Chrome ran and was accessible. Once I had logged off and logged back on it was no longer there.

    Does anyone know how i can prevent this from happening?

    Sean

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,807
    Thank Post
    517
    Thanked 2,469 Times in 1,913 Posts
    Blog Entries
    24
    Rep Power
    835
    There's a few options for this:

    1. Don't block Chrome and Firefox
    2. Use a tool such as Impero or Securus to block any window with "Chrome" or "Firefox" in the title
    3. Use group policy and FSRM to block exes from running on student drives, desktops and memory stick (combined with USBDLM to control where USB sticks appear)

  3. #3

    Join Date
    Dec 2013
    Location
    North East
    Posts
    51
    Thank Post
    15
    Thanked 19 Times in 12 Posts
    Rep Power
    5
    I would go for a Software Restriction Policy to restrict any .exe's running from the directory where it is located which is probably a temp downloads folder.

  4. #4
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,008
    Thank Post
    42
    Thanked 83 Times in 79 Posts
    Rep Power
    22
    Block exe downloads on your proxy. Cut off the source.

  5. Thanks to free780 from:

    Oaktech (27th January 2014)

  6. #5
    gtg93's Avatar
    Join Date
    May 2010
    Posts
    329
    Thank Post
    202
    Thanked 41 Times in 33 Posts
    Rep Power
    15
    You could block chrome.exe and firefox.exe via GPO... We had a similar thing the other week, and it appears, regardless of what the exe is called, the processes are still chrome.exe and firefox.exe so the block still works.

    Failing that, Impero or some other monitoring tool as already mentioned.

    Worth noting, that if you install the chrome gpo extensions, you can lock it down pretty well, allowing it to be used.

  7. #6
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    806
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    Had similar issues with students running portable versions of browsers and UltraSurf from their home directories and key chains - App Locker policies put an end to it. Of course you're going to need to be running Windows 7 Enterprise to use this; Professional does not support it.

  8. #7


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,026
    Thank Post
    231
    Thanked 2,699 Times in 1,994 Posts
    Rep Power
    792
    Quote Originally Posted by sadams1980 View Post
    We have banned the use of Chrome and Firefox in our school due to its ability to allow students to see the C drive and other parts of the network that IE doesn't allow.
    To prevent students browsing all local and network drives in Google Chrome, simply add file://* to the URL blacklist policy (after the ADMX templates have been added to your Group Policy Central Store).

    Deploying Chrome may make the students less likely to look for alternative browsers.

    I would also do what others have suggested above and block EXEs on your proxy, through AppLocker and FSRM.
    Last edited by Arthur; 31st January 2014 at 06:09 AM.

  9. #8


    Join Date
    Jan 2012
    Posts
    2,697
    Thank Post
    966
    Thanked 356 Times in 271 Posts
    Rep Power
    213
    Quote Originally Posted by Arthur View Post
    To prevent students browsing all local and network drives in Google Chrome, simply add file://* to the URL blacklist policy (after the ADMX templates have been added to your Group Policy Central Store)
    Wouldn't that screw up the kids making web pages in IT? (I don't know the specifics of the school, but I assume it's secondary if the kids are computer literate enough to download replacement browsers)

    Realistically there's zero reason kids should be allowed to download .exe's (doesn't RUN still count as a download? I may be wrong..), so disallowing that would be my first port of call in this situation.
    Also I'd block the execution of .exe's from their homedrives and temp locations/appdata to ensure they didn't download the exe inside a zip and run it from there, this should also deny 'Run' as it still to my knowledge) downloads it to temp and then executes it.
    For good measure, I'd also lock down the C:\ drive with NTFS permissions to ensure nothing can be written there by student accounts (it's possible they may have 'hidden' other programs or such there, if they were downloading things via Chrome)
    It goes without saying that exe's from memory sticks ought to be disallowed, too, to stop portable versions brought in from home.
    Last edited by Garacesh; 31st January 2014 at 11:09 AM.

  10. #9

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    We use ABTutor in school so I blocked all applications with chrome and Firefox in the name. ABTutor is amazing for the money can't praise it enough.

SHARE:
+ Post New Thread

Similar Threads

  1. [SIMS] Can Sims be run in XenApp?
    By Tricky_Dicky in forum MIS Systems
    Replies: 6
    Last Post: 26th October 2011, 11:26 AM
  2. Flash and {Firefox/Chrome}
    By p858snake in forum Windows 7
    Replies: 4
    Last Post: 3rd March 2011, 06:17 AM
  3. Can I run both Google Apps and live@edu under the same domain?
    By edutech4schools in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 13th December 2010, 11:00 AM
  4. 1.7.5b can be downloaded - [ again ]
    By mattx in forum EduGeek Admin Bar
    Replies: 2
    Last Post: 22nd October 2008, 01:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •