Preventing running batch files

  • Thread starter Thread starter Nick James
  • Start date Start date
N

Nick James

How do I stop students running batch files? I have all users folders in an
NTFS partition on the server, permissions are Administrators, Domain
Administrators and Student Name (all full control) When another student runs
"net use \\nameserver\namestudent$" as a batch file they get complete access
to the other students user area. I believe this can also be achieved using a
hyperlink
How can I prevent this.

Thanks
Nick
 
The problem is not that they run batch files - credentials must be provided in order
to gain access unless the guest account is enabled on that server. Possibly ntfs
permissions are too permissive - check advanced permissions also. Another possibility
is that the user whose folder is being accessed has a very weak or no password, or
the person running that batch file knows the administrator password on that server or
even for the a domain administrator account. You could enable auditing for logon
events on that server and view how sessions are being authenticated in Computer
Management/shared folders/sessions. If ntfs permissions look correct, have user
change password and do the same for administrators on that server and in the domain.
Also check the membership of the administrators group on the server, and the
administrators group, enterprise administrators, and domain admins group in Active
Directory to make sure they look correct.--- Steve
 
Back
Top