+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Stop The Little Criters From Running .exe from Home Folders in Technical; Hello Geeksters!....I have a problem at my school. I uninstalled MSN messenger and all games from our systems, but these ...
  1. #1

    Join Date
    Jun 2007
    Location
    The Lammas School, Leyton
    Posts
    5
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Stop The Little Criters From Running .exe from Home Folders

    Hello Geeksters!....I have a problem at my school. I uninstalled MSN messenger and all games from our systems, but these kids are reinstalling some hacked version of messenger that bypasses all secrity settings. Is there a way to stop any .exe fron beling launched from default home drives or usb sticks?

  2. #2

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Stop The Little Criters From Running .exe from Home Folders

    If you have 2003 R2, you can apply rules to the home folders to stop EXEs being stored there in the first place, and it e-mails you every time someone tries to save one, works a treat!

    As for USB sticks, I believe you can use a section of active diectory to control the areas they are allowed to launch programs from. Use the USB drive letter manager software to control what drive letter is used for your USB sticks, and disallow that drive for execution of programs.

  3. #3
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Stop The Little Criters From Running .exe from Home Folders

    This topic has been covered extensively before if you do a search. Like maniac says the File screen features of R2 are great for home folders and for USB drives use the program USBDLM combined with software restriction policies will sort them out.

  4. #4
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,992
    Thank Post
    287
    Thanked 283 Times in 197 Posts
    Rep Power
    118

    Re: Stop The Little Criters From Running .exe from Home Folders

    Quote Originally Posted by augustm
    Hello Geeksters!....I have a problem at my school. I uninstalled MSN messenger and all games from our systems, but these kids are reinstalling some hacked version of messenger that bypasses all secrity settings. Is there a way to stop any .exe fron beling launched from default home drives or usb sticks?
    We set this is software restrictions in GP and works great. Just add in d: e: f: g: and thier home drive. Will work a treat. Also, you may want to block the local temp folders as running exe's can add files to there.

  5. #5
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Stop The Little Criters From Running .exe from Home Fold

    Quote Originally Posted by timbo343
    We set this is software restrictions in GP and works great. Just add in d: e: f: g: and thier home drive. Will work a treat. Also, you may want to block the local temp folders as running exe's can add files to there.
    Rather than trying to block particular locations, it can be easier and more secure to just allow the locations you want executables to be launched from (eg C:\Program Files, C:\Windows)

  6. #6

    Join Date
    Jul 2007
    Location
    Nottingham
    Posts
    195
    Thank Post
    19
    Thanked 7 Times in 7 Posts
    Rep Power
    16

    Re: Stop The Little Criters From Running .exe from Home Fold

    If its JUST the home folder you want to stop it happening in then you can also set special permissions on their folders to stop them running programs.

  7. #7
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Stop The Little Criters From Running .exe from Home Fold

    Quote Originally Posted by dan400007
    If its JUST the home folder you want to stop it happening in then you can also set special permissions on their folders to stop them running programs.
    If you are talking about removing the 'execute' NTFS permissions then I don't think it will work. If a student is able to copy a file into their home folder then as the creator of the file, then implicitly have the permission to change the permissions on it. That means that although the file may inherit a set of permissions that does not include the execute permissions, the student cannot be prevented (other than by hiding the interfaces) from changing the permissions on that file.

  8. #8

    Join Date
    Jul 2007
    Location
    Nottingham
    Posts
    195
    Thank Post
    19
    Thanked 7 Times in 7 Posts
    Rep Power
    16

    Re: Stop The Little Criters From Running .exe from Home Fold

    True. We have 'right-click' and the command prompt disabled for all students. This gets around the problem for all but the smarter students and at that point they're smart enough to realise that they can and will be caught in the end.

    As another thread says, how far do you take security. No something to start in this thread.

    We're not currently using the file screening in R2 as we've just moved our user areas over to an R2 server. But does R2 screening look within compressed files? For example if a student has an exe in a zipped file would they be able to run that file or would R2 pick it up?

  9. #9

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Stop The Little Criters From Running .exe from Home Fold

    Quote Originally Posted by dan400007
    We're not currently using the file screening in R2 as we've just moved our user areas over to an R2 server. But does R2 screening look within compressed files? For example if a student has an exe in a zipped file would they be able to run that file or would R2 pick it up?
    Unsure. I just block zipped files as well

  10. #10
    greenfieldsupport's Avatar
    Join Date
    Mar 2007
    Location
    Newton Aycliffe, Durham
    Posts
    240
    Thank Post
    14
    Thanked 3 Times in 3 Posts
    Rep Power
    15

    Re: Stop The Little Criters From Running .exe from Home Folders

    Yes we needed to block zips aswell as it runs it from the temp directory...

    c:\windows\temp

  11. #11
    azrael78's Avatar
    Join Date
    Sep 2007
    Location
    Devon
    Posts
    383
    Thank Post
    47
    Thanked 37 Times in 33 Posts
    Rep Power
    20

    Re: Stop The Little Criters From Running .exe from Home Fold

    I thought they also ran from %TEMP%.

  12. #12
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74

    Re: Stop The Little Criters From Running .exe from Home Folders

    If the zip extracts to temp then it will get around file screening this is where software restriction comes in.

SHARE:
+ Post New Thread

Similar Threads

  1. how do you stop kids from running exe from IE.
    By timbo343 in forum Windows
    Replies: 15
    Last Post: 8th January 2008, 02:14 PM
  2. Resetting Permissions for Student Home Folders
    By Zoom7000 in forum Windows
    Replies: 11
    Last Post: 5th December 2007, 10:33 AM
  3. Replies: 3
    Last Post: 30th October 2007, 04:58 PM
  4. Stop applications running at certain times
    By timbo343 in forum Windows
    Replies: 5
    Last Post: 27th April 2007, 01:08 PM
  5. Stop kids running programs from their USB key
    By timbo343 in forum Windows
    Replies: 8
    Last Post: 28th September 2006, 02:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •