Block Copying of .exe from memory stick

[PyROm]

Our ICT department is teaching small basic on our computers. We use fsrm to prevent saving of .exe to users home drives so have run into the problem that they cannot compile their programs after they have saved them. The main sticking point for us not opening up .exe on their home drive, is that they are allowed usb memory sticks. Although we block them running .exe from the stick itself via gpo, it doesn't actually stop them copying them to another drive (although they dont have write access to anywhere they can save .exe files, at the moment). I was wondering if anyone knew a way to stop copying the files, or another way around the problem? I know people are using vm`s etc. for similar problems, however we dont have time to set this up.

[kennysarmy]

I think you need to invest the time in a proper sandbox environment as this will sort out this issue and more in terms of allowing students to experiment with code etc.

 

We use Oracle VirtualBox here which resets each time they restart it and it allows them to save work back to the hosts H:\ drive...

[PyROm]

Unfortunately small basic compiles wherever the source file is saved, so if they saved their file onto their h:\ drive, then tried to compile it, it would fail because .exe were blocked.

[chazzy2501]

map a local ram drive?

[synaesthesia]

I have to agree with @kennysarmy - the age old cliche of preparing to fail applies. It wouldn't take long to set that up assuming you have capable hardware.

If students can copy .exe files that can be as harmful as being able to run them regardless of who's logged on so if you need to argue the requirement of time for someone, that's a very good point to help you.