just finished a script that should be used by our hotline-agents... (will reinitialize the pcANYWHERE host Service on Comps in the Environment to (re-)enable our agents gain access to them)....
Script is called by a batchfile (Shortcut on Agents Desktop(NT4 with NTFS))

The Kixscript called by this batch asks the Agent for Workstationname where to reinitialize the Service and READS a FILE called 000.txt where the SuperAdminPassword
is in. (thats the Security hole)

Afterwards it calls another cmd where Domainname is determined ,ipc$ is mapped
(second Security Hole) and the Service is manipulated..... second cmd exits back to KixScript ; Kix exits back to origin batch which is paused in order to give agents the possibility to see results....

My Problem now is:

• to secure the pwd-file against access of agents but allow kix to read it.....
  
• prevent Agents to pause the 2nd cmd file by pressing ctrl-c while ipc$ is mapped..
  

any clue anyone ???

Thanks Jochen

_________________________