July 24, 2008 01:47pm pdt

1. rpggamer... 40,008
2. IndiGenus 36,230
3. jahboite 26,169
4. r-k 19,590
5. arnold 10,150
6. nsx106... 9,825
7. richrumble 7,050
8. briancassin 7,000
9. ahoffmann 6,907
10. PowerIT 6,400
11. tigermatt 6,148
12. johnb6767 5,600
13. KCTS 5,500
14. rindi 5,350
15. paradoxe... 5,300

1. rpggamer... 152,133
2. r-k 100,837
3. Sheharya... 88,781
4. IndiGenus 58,470
5. war1 45,835
6. blue_zee 39,997
7. sunray_... 39,840
8. jahboite 32,113
9. ghana 29,660
10. Tolomir 29,508
11. rossfingal 27,308
12. johnb6767 22,034
13. ahoffmann 20,357
14. PowerIT 19,977
15. LucF 17,713

04.06.2008 at 06:05PM PDT, ID: 23300241

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.3

Stop students creating .bat that call "Net Send" and "TSShutdown" commands

Zones: Networking Security Vulnerabilities, Windows XP Operating System, Windows Network Security Questions

Tags: Microsoft, Windows, XP Pro SP2

I'm a System Administrator at a High School, albeit somewhat of a newbie.
As with most System Administrators new to a network I didn't create, I'm having some troubles with the security holes left by those that have come before me.

We are running W2K3 servers & XP Pro clients.

We have blocked students from directly accessing the command prompt, using group policy, which was in place when I came here. However, some little bright spark has figured out how to create a .bat file using notepad, that calls an executable, i.e. command.com, etc.

Their two favorites at the moment are the "Net" command coupled with the "/send" switch, to send stupid (& often infinitely looping) messages to other machines, etc. However, more alarmingly, a few have found out about "TSShutdown". I tested this as a student the other day & found to my horror that there is presently nothing preventing them from shutting down any machine on our network, including our servers!!

The whole thing is getting completely out of hand, and we really need to stamp this out right now. A third party comapny we contract to maintain our servers, tried implementing a group poilcy that blocked student access to "command.com" but this hasn't stopped anything.

Can anyone please suggest a way to lock these two commands down, or better still, how to stop students from creating and running batch files full stop??

Start your free trial to view this solution

Question Stats

Zone: Security

Question Asked By: SIC_admin

Solution Provided By: richrumble

Participating Experts: 5

Solution Grade: B

Translate:

Loading Advertisement...

20080236-EE-VQP-29 / EE_QW_2_20070628