#70634 - 2002-10-07 09:19 AM
Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello all
I have an issue at our school where our pupils are creating shortcuts to gain entry to areas of our drives where they should not be.
I use the NoDrives Policy to stop the drives from appearing in Explorer but pupils just create a shortcut to the required drive.
Is there any way, from within KiXtart to disable the creation of Shortcuts?
This is on Windows '98SE.
Thanks in advance
Kevin Cowans
The Armthorpe School
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
|
#70636 - 2002-10-07 09:35 AM
Re: Disabling Shortcut creation
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
We had this problem too.
Off the top of my head we did something like this.
We moved the "Create New Shortcut" wizard(which I think is AppWiz.cp) to an area the students didn't have access to, only ourselves(admins) and Staff. If the students tried to do New|Shortcut, they get an access denied message.
I'm trying to remember what the registry key was that needed to be changed the tell it to look somewhere other than C:\windows.
When I do. I'll let you know
We also disabled RightClick (another regedit) which helps.
The problem we have with shortcuts now, is kids bringing them in on Floppy, and using hyperlinks in Word!!
|
|
Top
|
|
|
|
|
#70637 - 2002-10-07 09:43 AM
Re: Disabling Shortcut creation
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
I've found the regedit file, I'll email it to you.
This changes the path for Appwiz.cpl to "T:\ControlPanel\Appwiz.cpl" You'll have to change it to whatever you want it to be, but this is a drive to which Staff and administrators have access, but students don't, so only the people who need shortcuts(us and teachers) can create them.
We just run this at logon, and it does the business!!
|
|
Top
|
|
|
|
|
#70639 - 2002-10-07 09:53 AM
Re: Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello
It would be much easier but we are talking about local drives to which permissions can not be set in Windows 9x.
Bye for now
Kevin
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
|
#70640 - 2002-10-07 10:01 AM
Re: Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello Matthew
I forgot to mention that our Mail Server Refufes Reg files for security reasons.
Would it be possible for you to cut and paste the contents of the Reg file into the body of the EMail.
Thanks in advance
Kevin
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
#70641 - 2002-10-07 10:05 AM
Re: Disabling Shortcut creation
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
I'm doing it now!
|
|
Top
|
|
|
|
|
#70643 - 2002-10-07 10:15 AM
Re: Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello Ghost
They are accessing the Windows and Program Files directories.
Bye for now
Kevin
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
|
#70644 - 2002-10-07 10:18 AM
Re: Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello Matthew
I received your EMail and tried to reply to it but got an error.
Bye for now
Kevin
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
|
#70646 - 2002-10-08 12:09 AM
Re: Disabling Shortcut creation
|
kncowans
Getting the hang of it
Registered: 2000-11-11
Posts: 98
Loc: Doncaster, UK
|
Hello Matthew
Just to let you know that I am still unable to EMail you.
In fact, if I Ping uffculme.devon.sch.uk I get 'Unknown Host'.
Bye for now
Kevin
_________________________
Kevin Cowans
Senior ICT Technician
The Armthorpe School
|
|
Top
|
|
|
|
|
#70647 - 2002-10-08 12:29 AM
Re: Disabling Shortcut creation
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
I've sent a test email to myself from hotmail and it worked fine. Not sure what the problem is with the pinging.
What message do you get when trying to mail me?
|
|
Top
|
|
|
|
|
#70648 - 2002-10-08 12:34 AM
Re: Disabling Shortcut creation
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
quote:
In fact, if I Ping uffculme.devon.sch.uk I get 'Unknown Host'.
I'm not surprised. There is no A record for that name.
Mail is handled by the following hosts:
quote:
uffculme.devon.sch.uk 86012 IN MX 10 mx.swgfl.ifl.net
uffculme.devon.sch.uk 86012 IN MX 50 mx1.ifl.net
uffculme.devon.sch.uk 86012 IN MX 100 mx2.ifl.net
Both mx?.ifl.net servers are responding.
Send a private message (the  icon) to take this conversation off the public board.
[ 07. October 2002, 12:36: Message edited by: Richard Howarth ]
|
|
Top
|
|
|
|
|
#70650 - 2002-10-07 05:27 PM
Re: Disabling Shortcut creation
|
Radimus
Moderator
Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
|
if the students are accessing each other's machines (win9x) why do you not disable file and printer sharing
even if you can prevent them from making shortcuts, they can still navigate there by typing in the run box, or mapping a drive.
|
|
Top
|
|
|
|
|
#70651 - 2002-10-07 06:16 PM
Re: Disabling Shortcut creation
|
Jack Lothian
MM club member
Registered: 1999-10-22
Posts: 1169
Loc: Ottawa,Ontario, Canada
|
Radimus,
The run box can be disabled but in general you are correct. The are other ways besides shortcuts to do it. Once you eliminate the shortcuts, the students will find the other ways.
While it is not 100% effective, we use the RestrictRun policy & do not include explorer in the list of permissible programs. Then we have tried to weed out all the back doors into explorer. I know of one school board that has taken the drastic step of deleting explorer all together.
A philosophical rant:
Unfortunately, MS security doesn't really adapt well to schools & libraries. I believe it is not really an issue of Win9x, rather it is an MS culture issue. MS developed their concept of security for the business world not the home or school market. In the framework of a school local, roaming, group, & mandatory policies don't really deliver. All have serious shortcoming that you must program around. It didn't have to be this way because Novell has a security system that adapts to well to schools. Unfortunately, MS pays lip service to schools but in reality they don't care. If you don't believe me, visit their K-12 site. The site is just a sales site for WinXP & Office XP. Where are the utilities, implementation plans & templates suitable for schools? Also for many school boards, their rather expense academic licenses entitle them to no support.
When using MS systems in schools, I think you have to be prepare for shortcomings & work arounds.
_________________________
Jack
|
|
Top
|
|
|
|
Moderator: Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart
|
1 registered
(Allen)
and 957 anonymous users online.
|
|
|
![[Eek!]](images/icons/shocked.gif){kind=icon}
![[Smile]](images/icons/smile.gif){kind=icon}
