+ Post New Thread
Results 1 to 8 of 8
Windows Thread, C:\ Drive Permissions etc in Technical; Hey All, We're having a few problems with our students spending all of their lesson time, browsing through system32, windows ...
  1. #1
    Silvor's Avatar
    Join Date
    Oct 2007
    Posts
    122
    Thank Post
    18
    Thanked 15 Times in 10 Posts
    Rep Power
    16

    Red face C:\ Drive Permissions etc

    Hey All,

    We're having a few problems with our students spending all of their lesson time, browsing through system32, windows etc - looking for little things they can run (like command) to cause problems. They've not found anything yet and they usually end up giving in and playing spider.exe (har...har...ha) - however I'm wondering if any other schools have applied restrictions to the C drive?

    We need the students to obviously be able to read/execute - due to some programs from there needing to be run; however we don't actually want them in the C drive, as there is nothing they'll need in there. (List Folder Contents restriction perhaps?)

    Does anyone have any ideas/solutions that work and if so can you tell me how you achieved it? We've got ideas ourselves, we're just trying to establish what works best.

    I'd appreciate any replies. I have had a search around the forums but couldn't find anything as to what I'm after.

    Cheers guys, and hope you are all well!

  2. #2
    DSapseid's Avatar
    Join Date
    Feb 2007
    Location
    West Sussex
    Posts
    1,148
    Thank Post
    129
    Thanked 54 Times in 47 Posts
    Rep Power
    37
    You can set a group policy to hide the C Drive in my computer and also prevent access to it. This will still let them use apps etc but if they try and access it they get an error message.

    EDIT:

    Are located here

    User Config>Admin Templates>Windows Explorer

    There is one thats called "hide specified drives" and one called "prevent access to drives" just edit these and set C to be hidden.
    Last edited by DSapseid; 7th February 2008 at 12:22 PM. Reason: Adding GPO locations

  3. #3
    monty's Avatar
    Join Date
    Jan 2008
    Location
    Northampton
    Posts
    26
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Yep, group policy will do it for you. You can also use group policy to add in particular permissions. i.e. some programs need to allow students to write to the c: you can set permission to apply just to that folder in
    Computer Config>Windows settings>Security settings>file system

  4. #4

    rush_tech's Avatar
    Join Date
    Jul 2006
    Location
    Nottingham
    Posts
    1,386
    Thank Post
    109
    Thanked 261 Times in 197 Posts
    Rep Power
    192
    Quote Originally Posted by monty View Post
    Yep, group policy will do it for you. You can also use group policy to add in particular permissions. i.e. some programs need to allow students to write to the c: you can set permission to apply just to that folder in
    Computer Config>Windows settings>Security settings>file system
    Thats how we do it here

  5. #5

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    16
    Same, no access to C. Actually their only access is home and a public folder. Permissions required by a program are added to the folders on the C drive to allow students to use some software.

  6. #6

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,144
    Thank Post
    113
    Thanked 518 Times in 447 Posts
    Blog Entries
    2
    Rep Power
    121
    Just to stir things, "why bother" :-)

    Mike's original post says that they can't do any harm and I think this is important - make sure that permissions are set so that they can't delete ntdll.dll etc but then let them explore. Many will get bored quickly - there's nothing exciting to do - others will get very excited about the "naughty" things they can do and you will know that they're not doing any harm.

    If you do lock it down, all that happens is that they'll look for other ways of getting at the C: drive folders (group policy blocks the explorer shell functions from what I remember but I don't think it stops someone writing a simple VB program to explore the drive)

  7. #7
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    "(group policy blocks the explorer shell functions from what I remember but I don't think it stops someone writing a simple VB program to explore the drive)"

    Thats correct you'll find that if you install GIMP it ignores GP and lets you browse the C: drive. I still hide it as it stops most of the kids messing, if the more inteligent kids work out how to then good for them it's all good education. Also sometimes you have to allow certain apps to write to an area within their install dir it makes it much more straight forward for students to find areas like this if they can browse the file system.

    To coin a phrase "Security is built in layers".

  8. #8

    vikpaw's Avatar
    Join Date
    Sep 2006
    Location
    Saudi Arabia
    Posts
    5,601
    Thank Post
    640
    Thanked 1,309 Times in 1,091 Posts
    Rep Power
    337
    We have lots of issues with the students trying to hack.
    We do use group policy quite effectively, but it does end up just moving their attention to other areas, or simply to vandalism.
    i'm all in favour of letting them have a go at some games, there are quite a few maths games websites that they like, and conveniently allowing the odd flash game website doesn't harm.
    if they are adamant not to work, i'd rather they shot aliens than found all of our network security holes!
    and of course, the smartest of the smart hackers, we employ, because it's simply safer to know where they are and what they are doing, than wait until they exploit the latest buffer overrun weakness.

SHARE:
+ Post New Thread

Similar Threads

  1. C: drive NTFS permissions?
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 6th February 2008, 08:24 AM
  2. User drive permissions and ownership
    By OutLawTorn in forum Scripts
    Replies: 0
    Last Post: 30th November 2007, 12:15 AM
  3. Permissions on your simsroot/sims drive/s: drive
    By Oops_my_bad in forum MIS Systems
    Replies: 1
    Last Post: 27th November 2007, 11:38 PM
  4. permissions on /var/www
    By browolf in forum *nix
    Replies: 10
    Last Post: 11th August 2007, 05:36 PM
  5. Replies: 7
    Last Post: 8th July 2007, 09:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •