+ Post New Thread
Results 1 to 9 of 9
Windows Thread, That cable trick... in Technical; Hi.. The little have worked out how to hack logging onto our machines. They start logging on, then pull the ...
  1. #1

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    That cable trick...

    Hi..

    The little have worked out how to hack logging onto our machines. They start logging on, then pull the network lead out during 'applying computer settings'. They then get full local admin permissions on the machine, and somehow get pointed to the unfiltered proxy address we use.

    We are trying to setup some sort of scheduled task to point to a local batch file on each machine that just logs the user off, if say a mapped drive is not found...

    Has anyone else got this or found away to stop the little , as the profile loads okay, so the logon continues.

    Mark
    Last edited by mark; 10th November 2008 at 01:49 PM. Reason: bad language

  2. #2


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 433 Times in 352 Posts
    Rep Power
    127
    There's a GPO that lets you completly prevent log on if there's no network present.

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Have you tried the group policy option:
    Computer Config > Administrative Templates > System > User Profiles : Log Users off when Roaming profile fails
    along with:
    Computer Config > Administrative Templates > System > User Profiles : Wait for Remote User Profile

    They may be able to help.

  4. #4

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    We use mandatory profiles, (which load quickly) and seem to be loading okay. Its more the permissions and gp settings and logon scripts for the users which don't work correctly (including our redirected desktop/startmenu).

    I have the logoff if no profile present working okay, but the gits are waiting till the profile has just about loaded.

    Will look into the logoff if no network present gp, but I am not sure it will apply properly.

    Mark

  5. #5


    Join Date
    Oct 2006
    Posts
    3,414
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    Of you could take the gateway out of the DHCP options. Takes away 99.99999999999999% of the reasons for wanting to be on as a local admin. I cant remember the last time we had a kid try to "hack" the computers/bypass security/etc.

  6. #6
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,726
    Thank Post
    176
    Thanked 229 Times in 211 Posts
    Rep Power
    69
    Even with proxies and filtering kids could still use something like this...

    UltraSurf

  7. #7

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    I solved this problem before by requiring the machine policies to be complete before allowing logon, waiting for the user's profile always, and disallowing access based on a roaming profile or cached login. Don't remember the exact GPO sections but I'm sure you can find them.

  8. #8
    Busybub's Avatar
    Join Date
    Feb 2007
    Posts
    384
    Thank Post
    44
    Thanked 39 Times in 37 Posts
    Rep Power
    22

  9. #9

    Join Date
    Sep 2005
    Posts
    153
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    Thanks for all the help chaps..

    We eventually came to a solution, using a registry hack, (HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ru n...)

    and adding an entry to a local bat file which we copy across the network at machine startup.

    This reg hack also helps clean out the intel tray icon, and any other sh1t you don't need!
    The batch file contains a simple check for a file existing on a mapped network drive at logon, (which if they pull the plug) doesnt get mapped, so the batch file calls logoff...

    Can't wait for this to pan out!

    Mark



SHARE:
+ Post New Thread

Similar Threads

  1. One quick trick prevents AutoRun attacks
    By ChrisP in forum Windows
    Replies: 0
    Last Post: 29th November 2007, 12:04 PM
  2. Replies: 2
    Last Post: 14th September 2007, 08:31 AM
  3. Can Anybody Identify This Cable?
    By DaveP in forum Hardware
    Replies: 9
    Last Post: 11th May 2007, 03:00 PM
  4. cable testing
    By witch in forum Wireless Networks
    Replies: 4
    Last Post: 10th October 2006, 01:30 PM
  5. Cable testers
    By Ric_ in forum Hardware
    Replies: 36
    Last Post: 23rd September 2006, 10:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •