You need to prevent user to use softwares.
Description of the Software Restriction Policies in Windows XP :
http://support.microsoft.c
Main Topics
Browse All Topics
Loading Advertisement...
Question
Want to stop MIRC and MSN Messenger..........
Hi all,
I want to block the use of MSN Messenger and MIRC for anyone who uses my PC...... i.e no one can sign in using MSN Messenger and MIRC.......How can I do this ? Maybe something like Zone alarm is what I need but I want it completely invisible from the user......Can it be controlled from within Windows ?
My actual situation is that I am the main user of my system....But when I am not at home my brothers keep on waisting time by chatting on MIRC and Messenger......I first tried to make an administrative user and then a Restricted user......But my brothers hacked through it and now they can enter through that administrative user as well......
In short I want to restrict my brothers from Using MIRC and MSN Messenger (Preferably if they are unaware of what is happening) and as you might have deducted my brothers also know quite a bit of Computers.........
I have Windows XP Professional with SP2 installed.........(Isn't there something in the firewall of windows that can help me)
Imran Arshad
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
try this
start>run
type secpol.msc (local security opens)
go to software restriction policies
then right click on additional rules
select new hash rule
brows to teh executable for the offending applicaton (eg: mirc32.exe)
make usre the box showing dissalowed is selected
apply and ok
then the applications cannot be ran even if they are moved or renamed.
also if your brothers are "restricted suers" change the admin password.
or circumvent the situatoin entirely and go into the bios and set a boot password.
this way they will not even be able to start the system and access the O\S.
beyond this if they are stil hacking into teh box i would suggest you take your brother out behind the wood shed. ;-)
Actually, you can download ZoneAlarm (firewall) from www.download.com and from the program control tab, you can restrict/allow whichever programs you want, nice and easy.
Hi:
In the following PAQ you will find some third party software names in order to block most types of chatting softwares :
http://www.experts-exchang
rsdn
envoguecomputers,
>>Actually, you can download ZoneAlarm (firewall)
Yes I do have ZoneAlarm......But as I have stated earlier I want it to be invisible from the User.....Can Zone Alarm be used in stealth mode?
katacombz,SheharyaarSaahil
You all have given almost the same link/method of using gpedit.msc /secpol.msc.....I have tested it and it worked quite nicely except one thing........It displays a pop up message "Windows cannot open this program because it has been prevented by a software restriction policy. For more information, open Event viewer or contact your system administrator"
I assumed myself on the place of my brother and googled to find the solution of this problem......and it took me 2 min. to find the solution, provided that I have administrative rights(Though I knew it beforehand).......
SheharyaarSaahil,
>>http://support.microsoft
applies to windows 2000 only........(at least the article says so)
Imran
1. create user accounts on the system
2. put your brother into a restricted user account
3. delete any backdoor accounts that may have been created
4. use strong passwords for administrative accounts EG: #P@455w0rd and do nto give it out
5. in the bios change settings so system will only boot to the hard drive this will prevent them from booting to floppies erd commander cd's and changing the admin password
6. password protect the bios
7. if needed put security screws in the case so they cannot clear bios passwords with a jumper.
or purchase a removable hard drive tray and when you cannot p[hysically monitor the system shut it down and lock the ahrd drive up in a secure location and force all other users to boot to a Knoppix cd and use that as thier computer interface\O\S
ok so here is the situation....
u can try to password protect ur account >>> he already hacked it !!
u can try restricting the use pf programs >>> he will search on google and get a solution
u can try restricting the Installation of programs >>> still if he can hack the Administrator account, and can search on google, and then he will be able to break this restriction also !!!
even if we put a BIOS on ur computer, so that he cannot start it..... there are 1001 methods out there to hack or delete the BIOS password !!!!
in short..... we can put Thousands of restrictions,,,,, but for every restriction there is a solution,,,, and if there is a solution,,,, he will get it via google..... so.... ?? :)
http://www.sharewareconnec
Can this software help you ?
It can hide windows on your desktop.
>>btw how do u connect to internet,,,,, via dialup or broadband ??
Via Network Card and you can call it Broadband.......though the Max downloading speed is limited to 20k......
>>in short..... we can put Thousands of restrictions,,,,, but for every restriction there is a solution,,,, and if there is a >>solution,,,, he will get it via google..... so.... ?? :)
>>If you really don't want to allow others use mirc or other chat programs, then the best way is not to allow them to use >>your computer.
So I should stop thinking about blocking them ???
>>u can try to password protect ur account >>> he already hacked it !!
Maybe this is the important point......Can I create accounts so that it will be hard to hack ? I know anything is possible but has SP2 given some more security for the administrator User account ?
So can you guide me so that I can do the following
1) Delete all current accounts including Administrator accounts as well
2) Create a Power user that is invisible to all other users. It is like administrator of the system. It will be only used when there is some trouble around (Is something like this even possible)
3) Create an Administrative account, say by my name, that I will be using......
4) Create restricted accounts so that I will assign these to my brothers......
if you people like I will start a new Question for this ????
Imran
You can also hide an icon from the system tray ;
http://www.tweakxp.com/twe
And hide an application from the Task manager :
http://www.codeproject.com
>> Via Network Card and you can call it Broadband
what i was thinking that MSN messenger(not sure abt MIRC) looks for IE internet settings to connect to internet.... sometimes if we set IE to work offline, MSNMessenger also refuses to connect, so what if we can put a "fake" proxy in Internet Connection settings for ur connection, so that he cannot connect via this fake proxy and will get thrown back..... !!
and then we will goto regedit, and put a restriction on IE so that he cannot change the IE options...... do u think he will guess that there are restrictions present on IE and he has to play with regedit :-?
>>not possible!! in XP u cannot delete the original Administrator account, and neither can create another Administrator
>>account... !! :-/
How to access that original account ? How do I know that when I installed what User Name and Password I chose ? Is the user name of that account always administrator or it can be different ? I just want to change the password of that administrator account so that hacking from that side is not possible.........
>>another Administrator account...
I didnot mean another Administrator account but simply an account with administrative rights......
>>http://www.knopper.net/k
katacombz, this is for Linux.... Are you advising me to shift to Linux ?
Imran Arshad
Knoppix is a linus operating system that will run from a bootable cd with no hard drive in the computer.
what i was suggesting is that if you cannot control the behaviour of other users on your computer, and cannot lock the out to put the hard drive into a removable sled and when you are not at the system remove the hard disk from it and take it with you.
then allow all other users to boot to the knoppix cd and make them use that then no matter what they do they cannot mess up your computer. and since it si on a cd they cannot install software
>>boot into safemode, and u will get there the Administrator user on welcome screen,,,,, this is the ORIGINAL
>>Administrator account !!
I did and I found 2 accounts over there.....
1) Administrator (Computer administrator)
2) Imran (Computer administrator)
but the problem is that I cant change the password.....I loged into Administrator and through (Control Panel) / User Accounts I tried to change the password.....But when I click on the button (after entering all info of old and new password) I get the error "Windows Cannot change password".....Why is it so ? Is this behaviour normal ? How to change the administrator password?
Imran
right click my computer and select "manage"
then click the + next to local users an groups
right click on administrator in thesers folder and select "change password"
thgis will allow you to change the password for the account without knowing the old one as long as the account you are logged in with administrator rights to the system
remember to use strong passwords
Thanks katacombz,
This was useful......
>>u must be entering a wrong OLD password !!
This cant be the case.....as I have loged into Windows (Safe Mode) with the account titled Administrator and with the same password.....How can Windows let me allow to sign in using the same password but wont let me change the Password?????
Imran
If you have a (nat)router (possebly built in your broadband modem) you could restrict the ports for msn (TCP&UDP:1863) and mirc (TCP:6660 - 6669).
Change your password for your router and keep it safe for your brother. This should keep him busy for a while.
If you can post what type of modem/router you have (if this would be an option) and we can help you through the configuration.
You could also try to restrict access to the IP and/or URL adresses of the msn server (google for it) and maybe even mirc?
Hope this helps?
Why don't you just tell your brothers to cut it out?
Ask them not to do it, tell them you've had enough and it's not funny any more?
Ask them nicely, be sincere and you'll get better results.
I have a number of brothers of my own and believe me the more you try to get one up on them, the more they will try to get one back. It's a game called sibling rivalry.
The problem is - they will win, because you're competing over Windows and Windows is so easy to hack.
All it takes is one little Unix floppy disk and you can reset any Windows Administrator password.
Sure you could restrict the use of the floppy as a boot device, but then they go into the BIOS and change it back.
So you password protect the BIOS, and then they use the BIOS reset jumper on the motherboard to get around it.
My point being: Whatever restrictions you put on your machine they can be overcome. Windows does NOT provide enough security, and neither does your hardware. You are far better off TALKING TO YOUR BROTHERS!!!
If you use an ethernet ADSL modem or Cable modem you can
disable your network card.
http://www.experts-exchang
I would create a logon and a logoff script wich enable and disable the network card for your own account.
So nobody can use the Internet except you.
If your brother is only in the Guest Group it can't enable the network card.
Wow what a big thread. My tuppence worth and apologies if anyone else has said this - is that you can set NTFS permissions on the messenger EXE so that only you have access to run it. Sorry I don't know what the exe is called cos I always take it off ! You might also want to take it out of registry run although I've got a feeling it reinstalls itself in there in which case your other users will get an err msg.
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: SheharyaarSaahilPosted on 2004-10-05 at 05:47:12ID: 12226020
Hello imarshad =)
u are running XP Pro, u cna use gpedit.msc to restrict their user accounts from running MSN Messneger and MIRC... checked this yet ??
HOW TO: Restrict Users from Running Specific Windows Programs in Windows 2000/XP:
http://support.microsoft.c
Or by registry editing....
Restrict Users from Running Specific Applications (Windows 2000/Me/XP)
http://www.winguides.com/r