Xatrix Security

[webman]

Just an FYI....

 

http://forum.xatrix.org/viewforum.php?f=8

 

Came across this forum, seems to be a few pupils who like to discuss the security of their school network. May be useful if you visit this every now and then and check the users' locations and/or profiles if you suspect anything.

[Simcfc73]

Pesky Kids.

 

Gotta look out for the kids dismantling the PC's

 

first make a boot disc, then shut down the computer, open the case, pull the bios battery, wait 20 sec, reinsert battery, close case, turn on computer

hit del or f1 to enter the bios

make sure the boot from floppy is enabled

save and exit

insert your boot disc and reboot

once in dos ...

 

cd\progra~1

dir

look for either hypertechnologies or faronics

delete the appropriate one

deltree hyper~1

or

deltree faronics

[Geoff]

You might want to consider buying computers with chassis alarms. If someone opens the case without a key it trips and the computer wont boot.

[webman]

Yep, some cases have holes for padlocks as well that will deter casual pupils who think they can get away with opening cases. But there's nothing better than making sure they're supervised at all times.

[Geoff]

CCTV would be another solution.

[CyberNerd]

we just removed the disks and boot them from the network

[GrumbleDook]

CCTV .... with camera mounted TASER might help ....

[ChrisC]

Luckily, I don't think many of the kids here are smart enough to try that sort of stuff, mind you we've got it locked down pretty heavy.

 

The problem is, there's always a way....

 

Chris

[Geoff]

Yeah, removing the floppy/CD would be another solution. Although that doesn't help much if they are able to USB boot?

[ChrisC]

Then again, locking down the bios and keeping them supervised from opening the cases would then help that??

 

The main problem is supervision!

 

Chris

[Geoff]

Well the original example post avoids your bios restrictions. That's the whole point of popping the case and ripping the battery out.

[ChrisC]

Again, supervision would stop that (hopefully)!

 

But they can be crafty buggers

 

Chris

[tarquel]

or lock the machines away

 

works for me [where possible naturally ]

 

i weigh up overheating in a cupboard over them vandalising them [and removing the product key / serial number stickers]

 

Nath.

[NetworkGeezer]

Yeah, removing the floppy/CD would be another solution. Although that doesn't help much if they are able to USB boot?

 

What's your secret Geoff? You always seem very sanguine when it comes to BIOS security.

[tarquel]

http://forum.xatrix.org/viewtopic.php?t=320

 

This kinda stuff is irritating

 

but looking at the last poster, if they think teacher are the admin's, then we are safe...

 

providing that we do give the teachers admin roles/permissions.

 

Logic to our madness

 

Nath.

[Gatt]

Just as well i have enforced Deny All to the Internet except legitimate school resource sites (vetted by me after a teacher submits the url)

 

Next task over summer is to remove all CD/DVD/Floppy drives

[Geoff]

What's your secret Geoff? You always seem very sanguine when it comes to BIOS security.

 

Lateral thinking.

[Gatt]

thinking of wiring up 240volts to the case if the buggers try and get in it

Obviously with an off switch case I need to get into them

[Gatt]

Someone want to enlighten me on this??

or if your school is stupid like mine, press tab when they are entering the user id and password if they have an interactive white board on

:?:

[Ric_]

You have to love thin client devices

 

Like to see them pop the case off one of them without being spotted

[E1uSiV3]

You have to love thin client devices

 

Like to see them pop the case off one of them without being spotted

 

Yeah and its not going to get them very far either is it lol