Posted: Tue May 28, 2002 5:17 am Post subject: Continually Delete Executables
I need a simple script .vbs (or program) programmed that will do the following (under Win2K Pro SP2):
- delete all *.exe (executables) in the directory D:\My Documents and D:\Downloads
- this script would continually monitor the directories (not just run once (else it could be a batch file) and delete the applications
This would prevent users from downloading from the Internet or bringing in applications from home.
I have "RestrictRun" on the computers but some people have figured out that they can bring in applications on CD or floppy, rename them to a common program such as "iexplore.exe" or "notepad.exe" and run them.
Posted: Tue May 28, 2002 3:21 pm Post subject: Delete *.exe
I have blocked off everything I can think of.
I thought of running a batch file that would continually loop and delete files and call it from a .vbs file (so no window appears). However, this causes CPU utiliziation jump to 100% and slows down the computer considerably. I don't know what I can do besides learning VB or VBScript and programming something...
Is there a script that can be used to check the path of an executable and if it is from the floppy (A or CD-ROM (F then deny the program?
I've locked down the workstations using RestrictRun and a whole bunch of other things but some students have finally figured out that they can rename executables brought from home, or downloaded into the common programs such as "iexplore.exe" (Internet Explorer) and then the program will run.
Im working on it.. does the file only needs to delete .exe? and ofcourse u want the students not to close the program..? mail me some more details and ill give u the code for it.. firstname.lastname@example.org
Posted: Mon Aug 19, 2002 8:11 pm Post subject: Executables from Floppies, CDs, and Network
I've made it so that no files existing in the errant folders (D:\Downloads, D:\My Documents) can be executed. That has stopped programs from being run. (This was done with Windows 2000 folder permissions.)
However, there is still 1 way that they can be brought in and run and that is from floppies, CDs, and over the network. No one has figured this out yet but then all the students are out on summer vacation.
Windows 2000 removed permissions on removable drives such as floppies and CDs. I do not know of any way that I can stop the execution of an .exe from a floppy, CD, or across the network.
I doubt there is a simple solution to this (and I have only 2 weeks to find one, if it exists, and implement it).
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Looking for more Windows Networking info?
Sign up to the WindowsNetworking.com Monthly Newsletter, written by Enterprise Security MVP Deb Shinder, containing news, the hottest tips, Networking links of the month and much more. Subscribe today and don't miss a thing! View a sample newsletter.
Become a WindowsNetworking.com member!
Discuss your Windows Networking issues with thousands of other Windows Newtorking experts. Click here to join!