+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 32
Windows Thread, Blocking ALL Executables in Students Home Directory in Technical; Originally Posted by DMcCoy You can switch SRP security level to disable everything, allow specified rather than allow everything disable ...
  1. #16

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,963
    Thank Post
    160
    Thanked 153 Times in 117 Posts
    Rep Power
    50

    Re: Blocking ALL Executables in Students Home Directory

    Quote Originally Posted by DMcCoy
    You can switch SRP security level to disable everything, allow specified rather than allow everything disable specified. Needs testing to catch and identify things that should be allowed like login scripts etc.
    Thats what I do, much easier than trying to block individual areas, not sure why more people done take this route
    Only took a few hours of testing to make sure all scripts etc worked. I just allow anything on our apps server and anything in C:\Program Files. That covers 99% of apps we use here

  2. #17

    Join Date
    Sep 2007
    Posts
    181
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    15

    Re: Blocking ALL Executables in Students Home Directory

    Do you use any disk quota software?

    Spaceguard SRM does this job very well but also has an option to deny certain file extensions. We don't allow students to save exe, mp3, or bat files for example.

    Since this is independent of policies is won't cause a problem is you want exes or bat files to be used within login scripts (which are run as the currently logged on user).

  3. #18
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109

    Re: Blocking ALL Executables in Students Home Directory

    Quote Originally Posted by fooby
    Yes indeedy.

    Software Restriction Policies blocks executing of executables, not any sort of file accessing. We have this set up here, so students can open any of their work files from usb ipod etc but not run any flash games and stuff like that.


    If you need more help, it took me ages so i can help with this more.

    fooby
    Do you know if you can get it to block MP3 and the like. Using normal methods does not work for us although everything is is being blocked fine.

  4. #19

    Join Date
    Sep 2007
    Posts
    181
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    15

    Re: Blocking ALL Executables in Students Home Directory

    How about running a script at log on or log off that deletes them all?

    http://217.180.28.46/ictforums/forum...asp?TID=59&KW=

  5. #20

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Blocking ALL Executables in Students Home Directory

    Or, more amusingly, replace them with alternative tracks. I find Aqua - Barbie girl works ok for the lads and the girls seem to hate death metal.

  6. #21

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Blocking ALL Executables in Students Home Directory

    Remember to prepare excuses though.

  7. #22
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109

    Re: Blocking ALL Executables in Students Home Directory

    I cant just be deleting peoples MP3 collections off their IPODs and such! I just wanted to stop them playing from a pen drive like I can stop them playing using R2s file screening in their user area.

  8. #23

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Re: Blocking ALL Executables in Students Home Directory

    I eventually got this working for users home directories and USB Drives.

    I had to use Fooby's method, which I had to adapt, because a srp does not understand a drive letter mapped to a network share. I had to resort to %HOMESHARE% which blocks all executables in all sub directories in that root drive.

    you can use drive letters for USB pen drives, because it is a physical drive. This along with USBDLM deployed and with startup script, worked a treat.

    Thanks,
    Mark

  9. #24
    Rozzer's Avatar
    Join Date
    Aug 2005
    Location
    South West
    Posts
    720
    Thank Post
    21
    Thanked 81 Times in 61 Posts
    Rep Power
    34

    Re: Blocking ALL Executables in Students Home Directory

    Thanks for this topic guys never really played with software restrictions and it worked a treat so thanks

    Ross

  10. #25
    Rozzer's Avatar
    Join Date
    Aug 2005
    Location
    South West
    Posts
    720
    Thank Post
    21
    Thanked 81 Times in 61 Posts
    Rep Power
    34

    Re: Blocking ALL Executables in Students Home Directory

    Hey all,

    I am having problem with software restrictions blocking access databases even tho i had taken access of the MDB extension from designated file types.

    Your help is very much appreciated

    Ross

  11. #26
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,505
    Thank Post
    10
    Thanked 508 Times in 445 Posts
    Rep Power
    116

    Re: Blocking ALL Executables in Students Home Directory

    I had to create an allow rule for *.mdb. It seems to be a known issue.

  12. #27
    Rozzer's Avatar
    Join Date
    Aug 2005
    Location
    South West
    Posts
    720
    Thank Post
    21
    Thanked 81 Times in 61 Posts
    Rep Power
    34

    Re: Blocking ALL Executables in Students Home Directory

    I made a allow rule but when i open the file with access 2003 it says.

    "security warning: unsafe expressions are not blocked.

    "Do you want to block unsafe expressions?"

    Any ideas?

    Ross

  13. #28
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    20

    Re: Blocking ALL Executables in Students Home Directory

    Hi Ross, thats to do with the macro security and such as far as I know, if you add the access ADM file to the group policy object you can set it to allow all (low security settings) for macro's and it should be ok.

    fooby

  14. #29
    mortstar's Avatar
    Join Date
    Jan 2007
    Location
    Oxford
    Posts
    341
    Thank Post
    13
    Thanked 29 Times in 18 Posts
    Rep Power
    22
    Blast from the past...

    SRP working perfectly stopping executables running from pen drives and file screening stopping them even being moved to home drives...

    Above was mentioned the idea of stopping mp3s from being 'run' from USB Pen Drives - has anybody had any clever(/BOFH) ways of denying this activity?
    Last edited by mortstar; 20th October 2008 at 03:09 PM.

  15. #30
    tosh74's Avatar
    Join Date
    Dec 2006
    Location
    Scotland
    Posts
    136
    Thank Post
    27
    Thanked 43 Times in 27 Posts
    Rep Power
    24
    Quote Originally Posted by markwilliamson2001 View Post
    It doesnt seem to block executables on home directories for students areas (which are mapped to H

    I am going to try %HOMEDRIVE% next to see if it works...

    Mark
    try %homeshare%




    You did it already
    Last edited by tosh74; 20th October 2008 at 06:14 PM.

  16. Thanks to tosh74 from:

    linkazoid (20th August 2009)



SHARE:
+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast

Similar Threads

  1. Students are installing IM apps to their home folder
    By bwallman in forum How do you do....it?
    Replies: 30
    Last Post: 20th December 2007, 06:31 PM
  2. natively remove home directory in ADUC
    By mac_shinobi in forum Windows
    Replies: 2
    Last Post: 7th November 2007, 05:47 PM
  3. Home directory not mapping
    By Oops_my_bad in forum Windows
    Replies: 9
    Last Post: 25th October 2007, 05:34 PM
  4. Home Directory Creation - how ??
    By pooley in forum How do you do....it?
    Replies: 4
    Last Post: 26th April 2007, 01:49 PM
  5. K9 free parental internet blocking software for home use
    By beeswax in forum Comments and Suggestions
    Replies: 1
    Last Post: 29th June 2006, 09:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •