Discussion Locked

Disallowing .bat files in win2000

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We currently run a network on win2k server and clients in a school.

We need to disallow the running of .bat files as they are using them to use net send to each other. We have tried in GPO to disallow it as a windows application for *.bat, cmd.exe and command.exe all of which have not succeeded.

Any ideas?

7 replies

by gralfus

If you want to disable the ability to do "net send", stop and disable the messenger service by default. Only an admin can reenable it.
This service isn't really used for much, and can be shut off without worries.

by gralfus

Start, Run, services.msc
Double-click Messenger (or right-click and select Properties)
Stop the service, the set startup type to Disabled.
(This does not affect Instant Messenger types of programs, and has the added advantage of blocking some types of internet spam).

by nic_g

Dont really want to turn off nets end all together as it can come in very usefull for us admins and the teachers.

If i can dissable .bat or the command.exe then i would be onto a winner

by don christner

What about associating .bat files with Notepad or some other program that won't actually run the .bat?

Don

This discussion is closed to new replies.