+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Chrome and Firefox can be run without download in Technical; Hi, We have banned the use of Chrome and Firefox in our school due to its ability to allow students ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9

    Chrome and Firefox can be run without download

    Hi,

    We have banned the use of Chrome and Firefox in our school due to its ability to allow students to see the C drive and other parts of the network that IE doesnt allow. Friday we had an incident where students have found out that they can run Chrome and Firefox on their system without downloading. I tried it out this morning and it does work, if I click run instead of save Chrome ran and was accessible. Once I had logged off and logged back on it was no longer there.

    Does anyone know how i can prevent this from happening?

    Sean

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,652
    Thank Post
    516
    Thanked 2,443 Times in 1,891 Posts
    Blog Entries
    24
    Rep Power
    831
    There's a few options for this:

    1. Don't block Chrome and Firefox
    2. Use a tool such as Impero or Securus to block any window with "Chrome" or "Firefox" in the title
    3. Use group policy and FSRM to block exes from running on student drives, desktops and memory stick (combined with USBDLM to control where USB sticks appear)

  3. #3

    Join Date
    Dec 2013
    Location
    North East
    Posts
    51
    Thank Post
    15
    Thanked 19 Times in 12 Posts
    Rep Power
    5
    I would go for a Software Restriction Policy to restrict any .exe's running from the directory where it is located which is probably a temp downloads folder.

  4. #4
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    913
    Thank Post
    41
    Thanked 69 Times in 66 Posts
    Rep Power
    18
    Block exe downloads on your proxy. Cut off the source.

  5. Thanks to free780 from:

    Oaktech (27th January 2014)

  6. #5
    gtg93's Avatar
    Join Date
    May 2010
    Posts
    310
    Thank Post
    178
    Thanked 40 Times in 32 Posts
    Rep Power
    15
    You could block chrome.exe and firefox.exe via GPO... We had a similar thing the other week, and it appears, regardless of what the exe is called, the processes are still chrome.exe and firefox.exe so the block still works.

    Failing that, Impero or some other monitoring tool as already mentioned.

    Worth noting, that if you install the chrome gpo extensions, you can lock it down pretty well, allowing it to be used.

  7. #6
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    795
    Thank Post
    81
    Thanked 130 Times in 113 Posts
    Blog Entries
    8
    Rep Power
    31
    Had similar issues with students running portable versions of browsers and UltraSurf from their home directories and key chains - App Locker policies put an end to it. Of course you're going to need to be running Windows 7 Enterprise to use this; Professional does not support it.

  8. #7


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,768
    Thank Post
    222
    Thanked 2,630 Times in 1,938 Posts
    Rep Power
    779
    Quote Originally Posted by sadams1980 View Post
    We have banned the use of Chrome and Firefox in our school due to its ability to allow students to see the C drive and other parts of the network that IE doesn't allow.
    To prevent students browsing all local and network drives in Google Chrome, simply add file://* to the URL blacklist policy (after the ADMX templates have been added to your Group Policy Central Store).

    Deploying Chrome may make the students less likely to look for alternative browsers.

    I would also do what others have suggested above and block EXEs on your proxy, through AppLocker and FSRM.
    Last edited by Arthur; 31st January 2014 at 06:09 AM.

  9. #8


    Join Date
    Jan 2012
    Posts
    2,586
    Thank Post
    928
    Thanked 344 Times in 264 Posts
    Rep Power
    207
    Quote Originally Posted by Arthur View Post
    To prevent students browsing all local and network drives in Google Chrome, simply add file://* to the URL blacklist policy (after the ADMX templates have been added to your Group Policy Central Store)
    Wouldn't that screw up the kids making web pages in IT? (I don't know the specifics of the school, but I assume it's secondary if the kids are computer literate enough to download replacement browsers)

    Realistically there's zero reason kids should be allowed to download .exe's (doesn't RUN still count as a download? I may be wrong..), so disallowing that would be my first port of call in this situation.
    Also I'd block the execution of .exe's from their homedrives and temp locations/appdata to ensure they didn't download the exe inside a zip and run it from there, this should also deny 'Run' as it still to my knowledge) downloads it to temp and then executes it.
    For good measure, I'd also lock down the C:\ drive with NTFS permissions to ensure nothing can be written there by student accounts (it's possible they may have 'hidden' other programs or such there, if they were downloading things via Chrome)
    It goes without saying that exe's from memory sticks ought to be disallowed, too, to stop portable versions brought in from home.
    Last edited by Garacesh; 31st January 2014 at 11:09 AM.

  10. #9

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9
    We use ABTutor in school so I blocked all applications with chrome and Firefox in the name. ABTutor is amazing for the money can't praise it enough.

SHARE:
+ Post New Thread

Similar Threads

  1. [SIMS] Can Sims be run in XenApp?
    By Tricky_Dicky in forum MIS Systems
    Replies: 6
    Last Post: 26th October 2011, 11:26 AM
  2. Flash and {Firefox/Chrome}
    By p858snake in forum Windows 7
    Replies: 4
    Last Post: 3rd March 2011, 06:17 AM
  3. Can I run both Google Apps and live@edu under the same domain?
    By edutech4schools in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 13th December 2010, 11:00 AM
  4. 1.7.5b can be downloaded - [ again ]
    By mattx in forum EduGeek Admin Bar
    Replies: 2
    Last Post: 22nd October 2008, 01:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •