ninjabeaver Posted July 14, 2005 Posted July 14, 2005 HELP!!! I'm stuck now. I've just been watching and now caught a student hacking into the Printer Server using Word. They just type in \\servername\ in Word 2000 on Windows XP Pro and they've got limited access to the server. Anything I can do to combat this? I know it's something stupid I've not done... once again..... HELP!!
tarquel Posted July 14, 2005 Posted July 14, 2005 Have you tried using the .adm templates for GP on your setup? Its the reason of using hidden shares and locking down access so that even if they can (or cant with that item mentioned elsewhere - i forget the name of it for 2003) see the shares or know the names of the hidden ones, they dont have access to them. That make any sort of sense? lol Nath
Geoff Posted July 14, 2005 Posted July 14, 2005 You can disable the functionality in the office ADM templates.
ninjabeaver Posted July 14, 2005 Author Posted July 14, 2005 Looks like I'm testing GP's on my OU's tomorrow then. Good ol' AD on MS XP SP2. I hope this works first time. I'm too hot to do too much. Can't you send some of that Welsh mountain breeze this way Tarquel old mate?
eejit Posted July 14, 2005 Posted July 14, 2005 Geoff and tarquel - How can you disable that with GPOs?
MkII Posted July 14, 2005 Posted July 14, 2005 word is a major hacking tool. I got most mileage by disabling the web toolbar.
kingswood Posted July 14, 2005 Posted July 14, 2005 Great stuff Mark- I kept thinking about this today too after reading the question here. Thanks!! Paul
Mango_RW Posted July 15, 2005 Posted July 15, 2005 I expect this a problem all over - at least there is something to stop them. Anyone got a link to the adm?
Dos_Box Posted July 15, 2005 Posted July 15, 2005 Whilst we are on the subject of Word. Did you realise that unless you disable the online clipart option in the Office ADM template any pupils that have been denied Internet access can use Office to open up IE for them using the system account?
Dos_Box Posted July 15, 2005 Posted July 15, 2005 I shall Make all M$ ADM files available shortly in the downloads section, just as soon as I dig them out.
tarquel Posted July 15, 2005 Posted July 15, 2005 ...or just visit these pages: MS Windows adm's: http://www.microsoft.com/downloads/details.aspx?FamilyID=92759D4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en MS Office 2k3: (tool last updated 23rd August 2004) http://download.microsoft.com/download/9/5/f/95f7e000-d7ab-4b86-8a5d-804b124c7a69/Office-2003-SP1-ADMs-OPAs-and-Explain-Text.exe MS Office XP: (tool last updated 24th October, 2002) http://download.microsoft.com/download/C/D/8/CD8FD60B-D53F-4E22-8202-BDB2D4D0898B/orktools.exe MS Office 2k: (tool last updated 20th April 2000) http://download.microsoft.com/download/6/b/3/6b34f4c7-44e6-4d85-91d9-1acf9479da7d/orktools.exe right click and unpack them - stupid installer aint needed I dont think. Enjoy (havent missed any out have I?) Nath
neilenormal Posted July 19, 2005 Posted July 19, 2005 We use Ranger which prevents the typing of a double backslash. Ranger is expensive to buy, and has a yearly maintenance cost but saves much time in that it groups together, in one place, all common administrative tasks Neilenormal
ninjabeaver Posted July 19, 2005 Author Posted July 19, 2005 *hugs Tarquel* Thanks for all the links mate.
tarquel Posted July 19, 2005 Posted July 19, 2005 No problemo Not a dig at DB, but easier to have links that a download as if the .adm tempaltes get updated, moved, etc. the links should show it or redirect you Cheers Nath
Ric_ Posted July 19, 2005 Posted July 19, 2005 No problemo Not a dig at DB, but easier to have links that a download as if the .adm tempaltes get updated, moved, etc. the links should show it or redirect you Cheers Nath That's why you link to the download page, rather than the download
tarquel Posted July 19, 2005 Posted July 19, 2005 Indeed Pease let me know via PM if any of the links change, so I can update them Ta, N.
Roger Posted July 28, 2005 Posted July 28, 2005 Hi Folks, anyone tell me were in office2003 template this setting is, I have not been able to find anything?? Ta, Roger
Bouncer Posted August 4, 2005 Posted August 4, 2005 I KNOW IT NOT STRICTLY WHAT YOU WERE TALKING ABOUT BUT you should also be careful because a student could easily enough create a new shortcut alter the extension and hey presto instant internet access or worse cmd maybe.
mullet_man Posted February 2, 2006 Posted February 2, 2006 I have a looked at the Office XP ADM files, but can't find this setting to stop UNC paths, can anyone point me in the right direction? Thanks.
indie Posted February 3, 2006 Posted February 3, 2006 you should also be careful because a student could easily enough create a new shortcut alter the extension and hey presto instant internet access or worse cmd maybe. If you've dissabled access to the command prompt in your Group Policy, even if the users finds cmd.exe it still wont let them execute it.
webman Posted February 3, 2006 Posted February 3, 2006 Our students can do this too, but can only browse to shares that they have access to. IIRC, it's the IPC$ share that they view when they do \\server\. Perhaps you could modify the NTFS/share permissions to reflect what you want the pupils to be able to do.
MkII Posted February 3, 2006 Posted February 3, 2006 If you've dissabled access to the command prompt in your Group Policy, even if the users finds cmd.exe it still wont let them execute it. With that setting enabled tho' students can still execute commands with batch files etc. Need to deny access to those extensions.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now