how to disable net send without stopping Messenger Servives

  • Thread starter Thread starter hh
  • Start date Start date
hh said:
Does anyone know how to disable NET SEND without stopping
Messenger Services ?? Thanks


I think disabling the Messenger service prevents you from receiving
messages, but you
can still send them. Aside from disabling the messenger service, there is
no way to
prevent people from receiving messages 100% of the time. However, there are
some
things you can do to make it difficult. You prevent them from using things
like the command prompt and Start/Run using group policies.

You can try using a DOSKEY macro to redefine the NET command (make sure you
do one for "net" and one for "net.exe"). There are several ways to do this,
something
like this will only allow them to map drives, nothing else:

Doskey.exe Net=If /i "$1" EQU "Use" Net.exe Use $2 $3 $4 $5

Doskey.exe Net.exe=If /i "$1" EQU "Use" Net.exe Use $2 $3 $4 $5


Keep in mind that "net send" isn't the only way to send messages, so even if
you prevent them from using that command there's always going to be some way
to send messages from other downloaded tools, but most people won't know
how to do this.
 
try this, but doesn't work. Can you please explain more
about parameter Marty ?? Thanks

It works, I just tested it. DOSKEY macros only work from the command prompt
(CMD.EXE). Have you disabled The Start/Run command?

It's easy to stop people from receiving messages, but not if you don't want
to disable the Messenger service. I don't think there is any way of
stopping people from *sending* messages, unless you were to block the
NetBIOS ports with a firewall or IP filtering. This would also stop other
functionality like browsing or mapping drives.
 
Yes i did. i disabled RUN, as well as command dos prompt
from GP. I included these command lines(Doskey) in my user
logon. All I want is to disable users using NET SEND, but
ablle to use NET USE (to map drive). Thanks
 
Yes i did. i disabled RUN, as well as command dos prompt
from GP. I included these command lines(Doskey) in my user
logon. All I want is to disable users using NET SEND, but
ablle to use NET USE (to map drive). Thanks


If you disabled RUN and the command prompt, then how are the users going to
run NET USE? And how are you testing this to know that NET SEND still
works? You need to provide more details in your posts.
 
Back
Top