Kids can get into servers

[craigg]

We have just found out thanks to our "pupil informer" that there is a way into our servers.

 

It seems that they are going to youtube, right clicking on a video link and clicking save target as, then saving it in their documents.

 

They then open this and click on HOME.

 

Which leads them nicely into the root directory of our server.

 

It also looks like they can delete other users work.

 

Is there a way of stopping this?

 

Thanks

[sparkeh]

NTFS permissions should take of this right?

 

Pupil accounts shouldn't have permissions set to allow this. Have you check permissions?

[FN-GM]

NTFS permissions should take of this right?

 

Pupil accounts shouldn't have permissions set to allow this. Have you check permissions?

 

as sparkeh says sort out the permissions it will stop them from doing that.

 

As well as permissions you could hide the shares.

[danrhodes]

Hi,

 

Lol thats kids for you, just change the perms on the folders that they can access, this should solve the issue. Check your backups just incase you get some kids with missing documents.

 

Then when all is sorted get the pupils responsible and get a good punishment sorted out. Id call the parents in maybe. Then after the punishment, offer them a job helping you out as white hackers.

 

 

Dan

[craigg]

Thanks for your quick responses.

 

We are going to have a look at the permissions then hide the shares.

 

Hopefully it will close up a few other holes i have found aswell.

 

 

 

[danrhodes]

Hope you get it sorted soon :-)

[goodhead]

I agree about permissions, but what about blocking youtube?

[OutToLunch]

From the description, youtube isn't the problem. Anything saved using "Save target as" would probably work. It must be Friday as my first thought was "They must have small kids/big server cases..."

[craigg]

Hahaha great stuff

 

Thanks a bunch guys!

[danrhodes]

LMAO THEY DON'T ACTUALLY GET IN THE PHYSICAL CASES, THATS MADE MY DAY!! Sorry just being daft!!

 

Lol just picture that!

 

Dan

[Butuz]

First line of defence for a network - disable right click for pupils!!!!

[jcollings]

First line of defence for a network - disable right click for pupils!!!!

 

Except is it useful and valuable. Much better to secure the network properly.

[danrhodes]

Yep I agree it is usufull and it shouldn't be blocked, just make sure your secured properly.

 

Dan

[speckled]

Even better, secure the servers and disable the right click.....what do they need it for anyway?

[jcollings]

Even better, secure the servers and disable the right click.....what do they need it for anyway?

 

I want it because context menus are really useful and something both staff and students need to use/learn to use.