[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 393
  • Last Modified:

Update Content Advisor without admin password

First I'll explain our company's setup.  We have 47 retail stores spread out across 5 states.  We are not on a LAN.  We enabled the Content Advisor to stop the store employees from visiting websites that aren't business related.  Most of these stores have Windows 2000, a few are still running 98SE and all have IE 6.0.  None of the stores have administrator rights to their machines.  In the beginning they did, but then they found out they could install a different browser like Firefox or Netscape to bypass the IE Content Advisor.  Our support people were spending several hours a day cleaning out spyware and virus's off of the computers. They were also installing games and downloading instant messengers & music instead of serving the customers.  Eventually we had to give them restricted access so that they could not install their own software or download anything.  Productivity is up. Spyware and virus removal are non-existant.

Now the problem. The sales people are doing their jobs, business is good. They company is doing so well that we are adding new products almost on a weekly basis.  Anytime we add a new vendor or a new competitor pops up I have to PC Anywhere into each and every computer to add that website to the approved list using an updated PICS file.  This means they have to log off of the store account and log back on as administrator in order for the PICS file to be updated.  The content advisor password also has to be entered for any changes to be saved.  Giving the stores these passwords to install their own file defeats the purpose.

Now my question.  Is there a batch file or any other way to push an updated PICS file without having to enter a password or log on as the administrator to the machine?  What I would love to be able to do is to email the updated file to each store location, have them double click on it and the file automatically installs without having to switch users or enter a password but I am not sure that is possible.

Thanks in advance for any help you can give me.

1 Solution
Rich RumbleSecurity SamuraiCommented:
You could use RunAs instead of logging off/on, but you'd still have to import the .prf file same as usual i believe.
To use RunAs on IE, you either have to make a short-cut to the iexplore.exe program (the default IE icon on the desktop cannot use runas, but the "Quick Launch" IE icon can)
Runas will save you the step of logging off then back on. I'm not sure if you specify a PICS (prf) file, if IE loads that each time, or just stores the content's in the registry or something. have you tried to just update the .prf file and see if that works?

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now