General discussion

Locked

Stop Shorcut & Path Creation by Users

By micktagg ·
I work for a large secondary school and the kids are using ilicit access to store MP3's games etc.
As we are using madatory profiles we can stop any permanent modifications however;
We have a number of applications that have to be run from a mapped drive, we acheive this by log in scripts then use the 'hide drives' in active directory. Unfortunately some of these applications including ones on C: drive need to have r/w/d/m rights for domain users how can you stop users creating shortcuts on the desktop or using 'save as' in windows application to put in a pathway.
There doesn't seem to be anything in 'InActive Directory' for this, another glaring Microsoft Hole in security

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Stop Shorcut & Path Creation by Users

by Shanghai Sam In reply to Stop Shorcut & Path Crea ...

Can't really help with C: drive (there is a disable option but it wipes out way to much to keep the computer useful) but you should be able to lock down the served apps folders a bit more tightly. At our school we also have a number of served apps that require modify access, but it is usually to only 1 or 2 files for records or scores etc.(eg. Phonics Typing is completely read only except for the file 'results.mdb')

We have created a "Swap Folder" as a place for students to share files (and for us to monitor). It doesn't really stop the problem but at least gets it off the desktop C: drives.

If you have per user profiles then a right click on an unwanted file then properties, security, will show up who pasted it there. Busted!!!

Using start, search, file, then specifying *.exe, *.zip, *.wav etc then browsing to your suspect areas will quickly reveal what (and from above) who has dumped stuff there. Block the student from internet, mail or the whole network for a few days etc.(assumes per user accounts)

As a draconian measure you could halt their access to these files by:

1. Removing the cdroms (floppies are 2 small for most music and games but still handy for other stuff)
2. Filtering the web with something like "Surf Control" and blocking by url excpetion *.mp3 etc
3. Get RIS working sweetly and do a reload round the school so that the desktops are 'cleaned' (1 a day maybe).

Unfortunately it is sort of like graffitti and the only way to slow it is to get rid of it as fast as it appears (yeah I know... time!).

Good luck in the struggle with 100's of potential hackers, sorry; 'students', inside your network.

John
Broome SHS
Australia

Collapse -

Stop Shorcut & Path Creation by Users

by micktagg In reply to Stop Shorcut & Path Crea ...

I'm already doing most of this but it is a bit clumsy thanks for the suggestion anyway

Collapse -

Stop Shorcut & Path Creation by Users

by Netuser In reply to Stop Shorcut & Path Crea ...

Use disk qoutas on each user profile to limit their allowable space.

Collapse -

Stop Shorcut & Path Creation by Users

by micktagg In reply to Stop Shorcut & Path Crea ...

Poster rated this answer

Collapse -

Stop Shorcut & Path Creation by Users

by micktagg In reply to Stop Shorcut & Path Crea ...

Point value changed by question poster.

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums