TePukeHighSchool
asked on
NET SEND MONITORING
Hi Guys
I have a situation where the students use NET SEND possibly off their flash drives with a bat file to broadcast messages, I have disabled Messenger in the services across the network under the computer level in GP, but the messgaes still get through and display on a printer monitor program we run called P-counter. I have looked into the P counter but this program really needs Net send to run properly, The next best thing is to get a good monitoring program, that will allow me to get the exact IP address of the computer when and where the message comes from. Any ideas on a good monitoring program?
Clint
I have a situation where the students use NET SEND possibly off their flash drives with a bat file to broadcast messages, I have disabled Messenger in the services across the network under the computer level in GP, but the messgaes still get through and display on a printer monitor program we run called P-counter. I have looked into the P counter but this program really needs Net send to run properly, The next best thing is to get a good monitoring program, that will allow me to get the exact IP address of the computer when and where the message comes from. Any ideas on a good monitoring program?
Clint
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Messenger service was disabled, the message was coming through the green pyramid of the client program of P Counter, no there is nothing in the logs I checked, it was broadcasted across the whole network.
If you want to find out where who's sending the message, perhaps you can use the windows network monitor to "sniff" the source of the message?
You could install something like wireshark (http://www.wireshark.com) to do a packet capture. Set it up to just listen for the port that net send uses and only capture the first 128 bytes or so of the packet.
Application popup: Messenger Service : Message from COMPUTERNAME1 to COMPUTERNAME2 on 10/17/2007 10:46:16 AM
OK this is if some program receive popups. Messanger service needs Messanger service to be runned on both machines in order to work. So if you disable Messanger service on workstations that students use, they will be unable to send messages to other computers. Other computers can have messanger service in run state.
Hope this help!!!