Re: students have unfiltered internet access!!!!

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Fabrussio (Fabrussio_at_discussions.microsoft.com)
Date: 11/10/04

  • Next message: Bruce Sanderson: "Re: Windows Explorer NoNetCrawling" 
    Date: Wed, 10 Nov 2004 13:24:02 -0800

    we use a mandatory roaming profile for all students, could some permissions
    be changed in that - on the
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    that would be retained? This would be less restrictive for me. I do notice
    already though that \\machinename\users only have RX access to this key...so
    how are they allowed to change it anyway?

    thanks

    "Ken B" wrote:

    > How about changing permissions on regedit.exe and regedt32.exe to allow only
    > administrators?
    >
    > The students aren't local admins on the machine, are they??
    >
    > Ken
    >
    >
    > "Marco" <tired.of.spam@hotmail.com> wrote in message
    > news:%23B%23bZ50xEHA.2568@TK2MSFTNGP11.phx.gbl...
    > > not really .. can you change the ACL on the registry key with a logon
    > > script?
    > >
    > > Marco
    > >
    > > --
    > > Free five computers' license for NeoExec for Active Directory
    > > [ www.neovalens.com ]
    > > ----
    > >
    > >
    > > "Fabrussio" <Fabrussio@discussions.microsoft.com> wrote in message
    > > news:9FF04A3A-973E-44DE-B18C-2988DF221CAF@microsoft.com...
    > >> Yes, registry editing is already disabled but you can still run .reg
    > >> files........any other ideas?
    > >>
    > >>
    > >>
    > >> "Marco" wrote:
    > >>
    > >>> Hi
    > >>>
    > >>> the only thing that comes to mind is to set the policy to prevent the
    > >>> use of
    > >>> registry editing tools, but AFAIK that only applies to the built in ones
    > >>> (regedit and regedt32) -- home made registry editing solutions will
    > >>> work.
    > >>>
    > >>> You could set an ACL on the registry key but being HKEY_CURRENT_USER
    > >>> could
    > >>> be tricky.
    > >>>
    > >>> cheers,
    > >>>
    > >>> Marco
    > >>>
    > >>> --
    > >>> Free five computers' license for NeoExec for Active Directory
    > >>> [ www.neovalens.com ]
    > >>> ----
    > >>> "Fabrussio" <Fabrussio@discussions.microsoft.com> wrote in message
    > >>> news:B55DC77E-244D-40A7-B166-492D457A3B15@microsoft.com...
    > >>> > Students have somehow get hold of a .reg file that they run and
    > >>> > changes
    > >>> > the
    > >>> > internet proxy address to the unfiltered proxy IP address. The proxy
    > >>> > address
    > >>> > is set in AD.
    > >>> > the file contains amongst other things makes changes to:
    > >>> > [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
    > >>> > Settings]
    > >>> > I though i could change permissions on that key through AD but
    > >>> > HKEY_CURRENT_USER is not even listed when I click 'Add key'.
    > >>> > (CLASSES_ROOT
    > >>> > is
    > >>> > etc)
    > >>> >
    > >>> > I would very much like a fix to prevent this as I have just done a
    > >>> > search
    > >>> > of
    > >>> > userspaces and foud 90 students with this!!!!
    > >>> >
    > >>> > Help?
    > >>>
    > >>>
    > >>>
    > >
    > >
    >
    >
    >

  • Next message: Bruce Sanderson: "Re: Windows Explorer NoNetCrawling"

    Relevant Pages

    • Repeated 1030 Userenv error logged
      ... students and a couple others for teachers & so on. ... proxy settings that everyone gets. ... for the other student that had the trouble. ...
      (microsoft.public.windows.group_policy)
    • Re: Proper Permissions
      ... so that would really want permissions 700. ... a directory that the students can write to, ... window of sabotage) also changes permissions and ownership as needed. ... ownership of the photo supplier. ...
      (comp.os.linux)
    • Re: folder permissions in a lab
      ... >is there a way th configure folder permissions on a network share so the word ... Make sure the accountused by the students do NOT have ... Right-click the folder, select Sharing & Security, and go to the ... the student group and click the Edit button. ...
      (microsoft.public.word.docmanagement)
    • Re: Office 2000 add ins - Solution
      ... You can also store these files on a server, change the permissions, and then ... scopy them to each client machine. ... The problem is that most of our users are students with limited rights to ... files be written to the system folder, these features fail to run for our ...
      (microsoft.public.office.setup)
    • Re: Setting up security on a folder
      ... Students and Teachers. ... Then under the security tab set the permissions as follows (leave the System ...
      (microsoft.public.windows.server.active_directory)