If you do not need to remotely manage the other computers via Computer Management and
those student computers are not sharing folders/printers with other computers on the
network then you can disable or uninstall file and print sharing on them. Disabling
the server service does the same thing and can be done for a large group of computers
via Group Policy. From what you describe, the students are administrators on their
computers and know administrator password on the other computers if they are able to
do such. You may want to review if they indeed need to be administrators on their
computers as that will make it difficult to lock them down. If you are in a domain
you can also use security policy to modify the user right for access this computer
from the network for those machines. For instance you could limit it to just those
users who should have access remotely such as domain admins group which would keep
them from doing what you describe. --- Steve
Tavis said:
Hello. I am a teacher at a local community college. Lately I have been noticing a
lot of students using the Computer Management tool in the Administrative Tools folder
in the Control Panel to connect to other computers in the workgroup and eject the
computers CD drive. This is really distracting in a quiet class room. They also use
net send to send random people messages(I just hope they don't attempt to start
sending domain wide net send messages). I know how to disable net send(I think the
easiest way is to just disable the messenger service, I heard that messes up some
printer applications though). Anyway, I was wondering if there is an easy way to
disallow connecting to another computer over the network in the Computer Management
Snap-In. Thanks for your help!
