+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 31
Windows Thread, Ranger Bypass in Technical; Dunno where this goes .. sorry.. OK our little kiddies have this bat file to bypass the start up of ...
  1. #1
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Ranger Bypass

    Dunno where this goes .. sorry..

    OK our little kiddies have this bat file to bypass the start up of Ranger

    net stop "Ranger Security Monitor"
    net stop "Ranger Network Client"
    taskkill /F /IM Rangertoolbar.exe

    How can this be stopped ? as blocking bat files would stop the logon scripts running to map the drives ?

    Any ideas

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Ranger Bypass

    How about blocking access to the 'net' and 'taskkill' commands?
    You might also want to stop them from running programs from their area with TrustNoExe. It'll work for USB drives, etc too.

    http://www.beyondlogic.org/consultin...ust-no-exe.htm

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,341
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414

    Re: Ranger Bypass

    use vbs instead for your drive mappings?

    Ben

  4. #4
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Ranger Bypass

    Quote Originally Posted by Grommit
    Dunno where this goes .. sorry..

    OK our little kiddies have this bat file to bypass the start up of Ranger

    net stop "Ranger Security Monitor"
    net stop "Ranger Network Client"
    taskkill /F /IM Rangertoolbar.exe

    How can this be stopped ? as blocking bat files would stop the logon scripts running to map the drives ?

    Any ideas
    Is there a way to stop it being loaded at start up ? as a staff member is running it within environment variables.. and i don't want him to know i know and block them

  5. #5

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Ranger Bypass

    Eh? students shouldn't be able to affect services.

  6. #6
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Ranger Bypass

    Quote Originally Posted by ITWombat
    Eh? students shouldn't be able to affect services.
    Nah..its a member of the technical staff.. i don't want him to know that I know that he knows that a bat file can kill ranger

    Is there a way of forcing Ranger through ?

  7. #7

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,643
    Thank Post
    895
    Thanked 1,314 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    444

    Re: Ranger Bypass

    group policy is your friend
    it has built in protection if enabled which blocks execution of file types from locations if you want (aka there my docs or mem sticks)
    Not at work so cant remember all the details but the little kiddies here cant run jack unless its from a location we specify.

  8. #8

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Ranger Bypass

    Quote Originally Posted by Grommit
    .. i don't want him to know that I know that he knows that a bat file can kill ranger
    LOL sound's like the geek episode of Friends.

    As ZeroHours says you can use GPO to control which executables are run.
    The normal way is to set path rules in a Software Restriction Policy (SRP).

    But you are on hiding to nothing because the above assumes that someone can't put new files in the allowed folders or substitute standard executables for others with the same name.

    If this 'colleague' of yours has local admin rights what's to stop him from booting into safe mode and changing the Ranger services to manual start rather than automatic. He can aslo remove the RangerToolbar executable form the run key or just move it out of it's expected path.

    Basically just acquaint your colleague with his job description and the school's AUP.

    Just thank your stars it wasn't a student
    /me shivers

  9. #9

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,341
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414

    Re: Ranger Bypass

    OK our little kiddies have this bat file to bypass the start up of Ranger
    You said it was the kiddies then changed it to a member of staff.

    I think you should just beat him over the head with the aup just because he's a member of staff doesn't change things.

    Ben

  10. #10

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Ranger Bypass

    Quote Originally Posted by plexer
    use vbs instead for your drive mappings?

    Ben
    This assunmes that kids will never workout how to wirte vbs scripts.

    "Domain Users", SRP and ACLs. It's the only way..

  11. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,341
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414

    Re: Ranger Bypass

    Very true.

    Ben

  12. #12
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Ranger Bypass

    Quote Originally Posted by plexer
    OK our little kiddies have this bat file to bypass the start up of Ranger
    You said it was the kiddies then changed it to a member of staff.

    I think you should just beat him over the head with the aup just because he's a member of staff doesn't change things.

    Ben
    Sorry I thought it was a kiddie.. but on investigation it turned out to be be a junior member of the Technical team ...

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Ranger Bypass

    Death by AUP.

  14. #14

    Sylv3r's Avatar
    Join Date
    Jul 2005
    Location
    Co. Durham
    Posts
    3,203
    Thank Post
    372
    Thanked 376 Times in 334 Posts
    Rep Power
    147

    Re: Ranger Bypass

    What reason is this Junior Technician wanting to remove the startup of Ranger anyway? Surely with him being a member of staff he must recognise that he has a duty to work and follow instructions from Senior Technician, Network Manager etc. If you are his senior why can't you just tell him to stop using the script why do you want to keep it such a secret from him that you are blocking it?

    As previous people have said, a copy of the staff AUP will come in handy here if you have one in place.

  15. #15
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Ranger Bypass

    Quote Originally Posted by Geoff
    Death by AUP.
    AUP..... Wassat ?

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. proxy bypass sites
    By bishopsgarthstockton in forum Links
    Replies: 77
    Last Post: 7th December 2006, 11:29 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •