NetSupport School policy woes

[jet5y]

Hi all,

 

I've sent an email to NetSupport about this but I was wondering if any of you have had a similar problem?

 

I am trying to roll-out NSS9 within one of our schools and I am having some difficulty in locking down certain aspects of the tutor program. I am unable to disable the file transfer and remote execute functions via group policy. The supplied tutor and student ADM files do not appear to have the option.

 

I have manually altered the registry as per instructions posted on here to disable those two functions and that appears to work. However, they alter the HKCU section of the registry which will clearly not apply to all users. I would also rather modify that functionality either through group policy via ADM or alternatively the client32.ini file. I manually created an ADM file to alter the relevant areas of the registry, however it didn't work, presumably as the HKCU area isn't populated for that user until it is first ran. I would of thought it would of left my UI\Disable... keys alone but clearly not.

 

Any help would be greatly appreciated.

 

Cheers!

[FN-GM]

Just to let you know, the adm files that come with NSS are dodgy (some polices don’t work for some reason). If you ring them up they will supply you with some working ones. If not i have some if you like.

 

Z

[jet5y]

Cheers for the reply! Are they the ones that are up for download from the support area? NSSTutor.adm and NSS_Student.adm

[jet5y]

Sorted it. I was modifying the user policy but using a laptop and we've got a blooming loopback policy (replace!) in place on the laptops... DUR! I spent hours on this...

 

Anyway, it's working now and for info, incase anyone else if having problems. My adm to disable those two options:

 

CLASS USER

CATEGORY "NetSupport School Extras"

POLICY "Disable File and Exec"

KEYNAME "Software\NetSupport Ltd\PCICTL\ConfigList\NetSupport School"

PART UI\\DisableFileTransfer EDITTEXT

VALUENAME "UI\DisableFileTransfer"

END PART

PART UI\\DisableExec EDITTEXT

VALUENAME "UI\DisableExec"

END PART

END POLICY

END CATEGORY