+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 34
Windows Thread, Students accessing the Servers through Word in Technical; Originally Posted by tarquel No problemo Not a dig at DB, but easier to have links that a download as ...
  1. #16

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Students accessing the Servers through Word

    Quote Originally Posted by tarquel
    No problemo

    Not a dig at DB, but easier to have links that a download as if the .adm tempaltes get updated, moved, etc. the links should show it or redirect you

    Cheers
    Nath
    That's why you link to the download page, rather than the download

  2. #17
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: Students accessing the Servers through Word

    Indeed :P

    Pease let me know via PM if any of the links change, so I can update them

    Ta,
    N.

  3. #18
    Roger's Avatar
    Join Date
    Jul 2005
    Location
    Work: Lancaster Home: Bamber Bridge
    Posts
    65
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    Hi Folks, anyone tell me were in office2003 template this setting is, I have not been able to find anything??

    Ta, Roger

  4. #19

    Join Date
    Aug 2005
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    I KNOW IT NOT STRICTLY WHAT YOU WERE TALKING ABOUT BUT


    you should also be careful because a student could easily enough create a new shortcut alter the extension and hey presto instant internet access or worse cmd maybe.

  5. #20
    mullet_man's Avatar
    Join Date
    Oct 2005
    Location
    Oldham
    Posts
    726
    Thank Post
    34
    Thanked 46 Times in 45 Posts
    Rep Power
    26

    Re: Students accessing the Servers through Word

    I have a looked at the Office XP ADM files, but can't find this setting to stop UNC paths, can anyone point me in the right direction?

    Thanks.

  6. #21
    mullet_man's Avatar
    Join Date
    Oct 2005
    Location
    Oldham
    Posts
    726
    Thank Post
    34
    Thanked 46 Times in 45 Posts
    Rep Power
    26

    Re: Students accessing the Servers through Word

    Anyone?

  7. #22

    Join Date
    Nov 2005
    Location
    Middlesbrough
    Posts
    402
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    Quote Originally Posted by Bouncer
    you should also be careful because a student could easily enough create a new shortcut alter the extension and hey presto instant internet access or worse cmd maybe.
    If you've dissabled access to the command prompt in your Group Policy, even if the users finds cmd.exe it still wont let them execute it.

  8. #23

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,401
    Thank Post
    637
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Students accessing the Servers through Word

    Our students can do this too, but can only browse to shares that they have access to. IIRC, it's the IPC$ share that they view when they do \\server\. Perhaps you could modify the NTFS/share permissions to reflect what you want the pupils to be able to do.

  9. #24
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,958
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Students accessing the Servers through Word

    Quote Originally Posted by indie
    If you've dissabled access to the command prompt in your Group Policy, even if the users finds cmd.exe it still wont let them execute it.
    With that setting enabled tho' students can still execute commands with batch files etc. Need to deny access to those extensions.

  10. #25

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,401
    Thank Post
    637
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Students accessing the Servers through Word

    Don't batch files run via cmd.exe though?

  11. #26

    Join Date
    Nov 2005
    Location
    Middlesbrough
    Posts
    402
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    Quote Originally Posted by mark
    With that setting enabled tho' students can still execute commands with batch files etc. Need to deny access to those extensions.
    Not if you select the optional "Disable the command prompt script processing also?" section of the "Prevent access to the command prompt" object.

  12. #27

    Join Date
    Sep 2005
    Posts
    143
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    18

    Re: Students accessing the Servers through Word

    Another way, for 'room' printers, is to change the security on the printer.
    By adding PC_NAME$ instead of usernames, anyone logged into the specified machines can use the printer.
    EG
    Room T9 -> T9_Laser -> Properties -> Security:
    Domain Admins full control
    T9_01$ print only
    T9_02$ print only
    ..
    T9_30$ print only
    T9_TUTOR$ print only

    No student/pupil groups or usernames listed. Anyone typing \\PRINTSPOOL\T9_Laser from other machines (G3_07 for example) would get access denied.

    @indie - You can package command.com into ms word and still get a command prompt even if you disable cmd from Group Policy - I used to do this when I was at school

  13. #28

    Join Date
    Nov 2005
    Location
    Middlesbrough
    Posts
    402
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    Quote Originally Posted by Frazer
    @indie - You can package command.com into ms word and still get a command prompt even if you disable cmd from Group Policy - I used to do this when I was at school
    Very true, at very least command.com should be on the list of banned applications also.

    I know kids can just rename command.com before they add it to the word file, but this should stop all but the most determined of children.

    The other way round this, like what we do is run Windows XP x64 edition, command.com is a 16bit app that simply won't run no matter what you name it on 64bit systems. cmd.exe which is 32bit won't run whatever it is called as long as the group policy is set up.

  14. #29

    Join Date
    Jun 2005
    Location
    Leeds
    Posts
    113
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Students accessing the Servers through Word

    not sure if this would work.....

    you could add a explicit deny 'traverse folder / execute' permission to the <student users> group on files you dont want them executing.

    I think that should work, deploying the permision should be possible via AD or a script.

    I always had all the user home drives / my document redirections configured in this way - it stopped them executing batch files, because the only place they could save stuff, they couldn't execute from.

    If you want to take it a step further you have to prevent them using removal media, because they can just execute stuff from there. Also possible with policies.

    There's always ways round ofc.

  15. #30

    Join Date
    Nov 2005
    Location
    Middlesbrough
    Posts
    402
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Students accessing the Servers through Word

    Wont that just stop them executing files saved in their user areas?

    What about files embedded into word documends like command.com?

SHARE:
+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast

Similar Threads

  1. Pupils accessing servers and shared folders
    By faza in forum Wireless Networks
    Replies: 22
    Last Post: 6th July 2009, 07:16 PM
  2. Replies: 9
    Last Post: 2nd November 2007, 08:55 PM
  3. Replies: 6
    Last Post: 5th June 2007, 02:35 PM
  4. Accessing work from home.
    By eejit in forum Windows
    Replies: 33
    Last Post: 1st June 2007, 01:47 AM
  5. Replies: 32
    Last Post: 25th July 2005, 07:17 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •