+ Post New Thread
Results 1 to 8 of 8
Windows Server 2000/2003 Thread, Preventing Bat and vbs files in Technical; Hi Got a problem where our darling students keep creating bat and vbs files and saving them to their home ...
  1. #1

    Join Date
    Dec 2009
    Location
    Unknown
    Posts
    3
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Angry Preventing Bat and vbs files

    Hi

    Got a problem where our darling students keep creating bat and vbs files and saving them to their home directory. Is there a way bat and vbs files could get automatically deleted on some sort of scheduled scan. Or some other way to prevent these files from being saved in the first place?

  2. #2
    tommccann's Avatar
    Join Date
    Jun 2009
    Posts
    252
    Thank Post
    46
    Thanked 39 Times in 31 Posts
    Rep Power
    0
    try EduSweep

  3. #3

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,710
    Thank Post
    3,246
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364
    for bat /vbs you could use group policy to do a black list to not allow command.com , wscript, cscript but not sure how that would effect startup / logon scripts ??

  4. #4

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144
    Quote Originally Posted by BSOD View Post
    Hi

    Got a problem where our darling students keep creating bat and vbs files and saving them to their home directory. Is there a way bat and vbs files could get automatically deleted on some sort of scheduled scan. Or some other way to prevent these files from being saved in the first place?
    If you have Server 2003 R2 you can setup Storage Recource Manager to stop the students saving certain extensions in their home areas - we do that here with great success. You can also block Wscript and command, it doesn't seem to affect login scripts for us.

    Mike.

  5. Thanks to maniac from:

    BSOD (28th January 2010)

  6. #5


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,579
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    Quote Originally Posted by mac_shinobi View Post
    for bat /vbs you could use group policy to do a black list to not allow command.com , wscript, cscript but not sure how that would effect startup / logon scripts ??
    cant you block them running from certain locations (so say d/e/f/u assuming u = users area d/e/f are cd/pen)

  7. #6

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,710
    Thank Post
    3,246
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364
    Quote Originally Posted by maniac View Post
    If you have Server 2003 R2 you can setup Storage Recource Manager to stop the students saving certain extensions in their home areas - we do that here with great success. You can also block Wscript and command, it doesn't seem to affect login scripts for us.

    Mike.
    I was thinking about that but I couldnt recall what it was called nor how to set it up so didn't want to suggest that.

  8. #7
    mullet_man's Avatar
    Join Date
    Oct 2005
    Location
    Oldham
    Posts
    726
    Thank Post
    34
    Thanked 46 Times in 45 Posts
    Rep Power
    26
    We use the Software Restriction Policy, to disallow

    *.bat
    *.cmd
    etc

    but need to allow \\server\netlogon\*.bat
    etc

    so logon scripts run.

  9. Thanks to mullet_man from:

    mac_shinobi (28th January 2010)

  10. #8

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,710
    Thank Post
    3,246
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364
    Quote Originally Posted by mullet_man View Post
    We use the Software Restriction Policy, to disallow

    *.bat
    *.cmd
    etc

    but need to allow \\server\netlogon\*.bat
    etc

    so logon scripts run.
    Would that be a point of failure because if they can get to the sysvol / netlogon or where ever ( depending on permissions of course ) they may be able to run scripts from there ?

SHARE:
+ Post New Thread

Similar Threads

  1. BAT & VBS
    By Chuckster in forum Windows
    Replies: 7
    Last Post: 30th April 2009, 12:15 PM
  2. Bat calling VBS problem
    By MK-2 in forum Scripts
    Replies: 5
    Last Post: 15th December 2008, 11:08 PM
  3. Covert CMD/BAT files to vbs help
    By tosca925 in forum Scripts
    Replies: 12
    Last Post: 8th November 2007, 02:58 PM
  4. .vbs .bat error in sysvol
    By alonebfg in forum Windows
    Replies: 7
    Last Post: 16th July 2007, 07:57 PM
  5. bat versus vbs
    By Uraken in forum Scripts
    Replies: 8
    Last Post: 30th January 2007, 10:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •