Printable View
Dunno where this goes .. sorry..
OK our little kiddies have this bat file to bypass the start up of Ranger
net stop "Ranger Security Monitor"
net stop "Ranger Network Client"
taskkill /F /IM Rangertoolbar.exe
How can this be stopped ? as blocking bat files would stop the logon scripts running to map the drives ?
Any ideas
How about blocking access to the 'net' and 'taskkill' commands?
You might also want to stop them from running programs from their area with TrustNoExe. It'll work for USB drives, etc too.
http://www.beyondlogic.org/consultin...ust-no-exe.htm
use vbs instead for your drive mappings?
Ben
Is there a way to stop it being loaded at start up ? as a staff member is running it within environment variables.. and i don't want him to know i know and block themQuote:
Originally Posted by Grommit
Eh? students shouldn't be able to affect services.
Nah..its a member of the technical staff.. i don't want him to know that I know that he knows that a bat file can kill rangerQuote:
Originally Posted by ITWombat
Is there a way of forcing Ranger through ?
group policy is your friend :D
it has built in protection if enabled which blocks execution of file types from locations if you want (aka there my docs or mem sticks)
Not at work so cant remember all the details but the little kiddies here cant run jack unless its from a location we specify.
LOL sound's like the geek episode of Friends.Quote:
Originally Posted by Grommit
As ZeroHours says you can use GPO to control which executables are run.
The normal way is to set path rules in a Software Restriction Policy (SRP).
But you are on hiding to nothing because the above assumes that someone can't put new files in the allowed folders or substitute standard executables for others with the same name.
If this 'colleague' of yours has local admin rights what's to stop him from booting into safe mode and changing the Ranger services to manual start rather than automatic. He can aslo remove the RangerToolbar executable form the run key or just move it out of it's expected path.
Basically just acquaint your colleague with his job description and the school's AUP.
Just thank your stars it wasn't a student
/me shivers
You said it was the kiddies then changed it to a member of staff.Quote:
OK our little kiddies have this bat file to bypass the start up of Ranger
I think you should just beat him over the head with the aup just because he's a member of staff doesn't change things.
Ben
This assunmes that kids will never workout how to wirte vbs scripts.Quote:
Originally Posted by plexer
"Domain Users", SRP and ACLs. It's the only way..
Very true.
Ben
Sorry I thought it was a kiddie.. but on investigation it turned out to be be a junior member of the Technical team ...Quote:
Originally Posted by plexer
Death by AUP. :)
What reason is this Junior Technician wanting to remove the startup of Ranger anyway? Surely with him being a member of staff he must recognise that he has a duty to work and follow instructions from Senior Technician, Network Manager etc. If you are his senior why can't you just tell him to stop using the script why do you want to keep it such a secret from him that you are blocking it?
As previous people have said, a copy of the staff AUP will come in handy here if you have one in place.
AUP..... Wassat ?Quote:
Originally Posted by Geoff