Cannot get Break command to work - KiXtart.org

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Advanced Scripting » Cannot get Break command to work

Page 1 of 2

Topic Options

#70577 - 2002-10-05 12:15 AM Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	We are trying to prevent the users from interrupting the logon script. We cannot seem to get the BREAK OFF command to do anything. It doesn't prevent the CTRL-c/BREAK keys, nor does it hide the "Please wait while your logon script executes". Reading various postings, we have also discovered that should anyone interrupt the logon, they should be logged off, but it will not do that either. The current system administrators were not around when the scripting was set up, but we are beginning to think that it has been done incorrectly, and has been wrong for 6 years! We are running an NT Server, and Windows 98 clients. Any help would be greatly appreciated, Cheers
Top

#70578 - 2002-10-05 12:22 AM Re: Cannot get Break command to work
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	well, it's not script. actually the break off is automatically on when script starts. anyway, the problem is your client. win9x is the only client that does cause grief. the please wait window was introduced in win3.11 and has been there with the poor networked os'es. anyway, as I do not have those, I can't say easy way to work around this. you could put setconsole("hide") as the first line of logonscript. _________________________ ! download KiXnet
Top

#70579 - 2002-10-05 12:24 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	We have setconsole("HIDE") in the script, but it doesn't prevent the users from either pressing CTRL-ALT-DEL, and ending Kixtart, or clicking cancel on the "Please Wait while your logon script executes" box. Thats where our real problem lies.
Top

#70580 - 2002-10-04 03:40 PM Re: Cannot get Break command to work
Jack Lothian Jack Lothian MM club member Registered: 1999-10-22 Posts: 1169 Loc: Ottawa,Ontario, Canada	We use NT servers with almost exclusively Win9x clients & we resolved these difficulties but our solution was rather radical. We turned off profiles & we control everything through reg files. At boot-up a reg file is put in place that locks the machine so it is unusable for anything but re-starting. Logon must complete before the machine will open up. Our logon scripts removes restictions instead of putting them in place. There are small utilities around that remove various special key combinations from working in Win9x. A search will probably find some but most are a bit old so you may have to look in out of the way sites. A few years ago, this was a rather common topic on this board. Do some historical searches & I am sure you will find a lot of suggestions. _________________________ Jack
Top

#70581 - 2002-10-04 03:47 PM Re: Cannot get Break command to work
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	You can disable (grey) the cancel by editing a file with a resource explorer. This has been discussed on the board. As Jack mentioned, you can invoke the must logon policy also. No matter how much effort you put into it, it's still Wintendo. You cannot make a silk purse out of it. Also, check out www.fortres.com _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#70582 - 2002-10-04 03:57 PM Re: Cannot get Break command to work
Jack Lothian Jack Lothian MM club member Registered: 1999-10-22 Posts: 1169 Loc: Ottawa,Ontario, Canada	There are or were a lot of add-on products to enhance the security of Win9x systems but most of the reliable ones cost more than many public schools can afford. Unfortunately, most software vendors including MS see schools as cash cows. _________________________ Jack
Top

#70583 - 2002-10-04 04:17 PM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	We have already dispensed with profiles, and use reg files and policies. I like Jack's idea, could do with some more in depth info though. How do I get to the historical forums? Thanks for your help so far.
Top

#70584 - 2002-10-04 07:18 PM

Re: Cannot get Break command to work

Jack Lothian Offline

MM club member

Registered: 1999-10-22
Posts: 1169
Loc: Ottawa,Ontario, Canada

I happen to have some old examples on hand for the boot up process. I think they are ok but I am not sure.

To completely lock down you need to go into the BIOS & disable the floppy drive & then password protect the BIOS. Next go into MSDOS.sys and disable all options that allow users to breakin during bootup. Then in your autoexec put:

"c:\windows\security\regedit.exe /s c:\windows\security\restrict.reg"

The restrict.reg file is:

code:

 
REGEDIT4

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDeletePrinter"=dword:00000001
"NoAddPrinter"=dword:00000001
"NoRun"=dword:00000001
"NoFind"=dword:00000001
"NoNetHood"=dword:00000001
"NoSaveSettings"=dword:00000001
"NoPrinterTabs"=dword:00000001
"NoSetFolders"=dword:00000001
"NoSetTaskbar"=dword:00000001
"NoDrives"=dword:03ffffff

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
"NoEntireNetwork"=dword:00000001
"NoWorkgroupContents"=dword:00000001
"NoNetSetup"=dword:00000001
"NoNetSetupIDPage"=dword:00000001
"NoNetSetupSecurityPage"=dword:00000001

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoSecCPL"=dword:00000001
"NoAdminPage"=dword:00000001
"NoPwdPage"=dword:00000001
"NoDispCPL"=dword:00000001
"NoDispSettingsPage"=dword:00000001
"NoDispScrSavPage"=dword:00000001
"NoDispAppearancePage"=dword:00000001
"NoDispBackgroundPage"=dword:00000001
"NoProfilePage"=dword:00000001
"NoDevMgrPage"=dword:00000001
"NoConfigPage"=dword:00000001
"NoFileSysPage"=dword:00000001
"NoVirtMemPage"=dword:00000001
"DisableRegistryTools"=dword:00000001

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"RestrictRun"=dword:00000001

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
"0"="HiddenOptions.exe"

[HKEY_LOCAL_MACHINE\Network\Logon]
"MustBeValidated"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FBF23B42-E3F0-101B-8488-00AA003E56F8}]
@="The Internet"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
@="My Computer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}]
@="Network Neighborhood"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020D75-0000-0000-C000-000000000046}]
@="Inbox"

The key to making this work is the disabling of profiles in the registry because you now get access to the Current User Hive which is critical for security.

Also note the hiddenoption.exe program. This is a can-opener. It is a small freeware security program for win98 that we keep on a disk. By changing the BIOS settings we can open up machines disconnected from the LAN. Beware if implement the above script without the canopener you will have great of difficulty getting at the OS. (It can be done by enabling boot from disk in BIOS & using a DOS boot disk.)

Then during logon we edit the registry with kixtart to open the system up. Again the key to making this work is disabling profiles so you can get at the current user hive.

Hope that helps you get started.

[ 04. October 2002, 21:49: Message edited by: Jack Lothian ]

_________________________
Jack

Top

#70585 - 2002-10-07 09:14 AM Re: Cannot get Break command to work
kncowans kncowans Getting the hang of it Registered: 2000-11-11 Posts: 98 Loc: Doncaster, UK	Hello Jack Whilst your solution would work it would only work the first time a machine is booted and not on machines where the user simply logs off ready for the next one. Ideally, what we need is a small utility that we can run in the Logon.bat file that disables the keyboard and then run it again to enable the keyboard at the end of the logon process. Of course this would only really work for those of us who do not require input during the logon process. Bye for now Kevin _________________________ Kevin Cowans Senior ICT Technician The Armthorpe School
Top

#70586 - 2002-10-07 09:22 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	Kevin, that is exactly our problem, an exactly the sort of thing we are looking for. Let's hope someone has the answer!
Top

#70587 - 2002-10-07 09:32 AM Re: Cannot get Break command to work
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	what about setconsole("maximize") setconsole("allwaysontop") this should prevent clicking and keystrokes elsewhere but on the script... _________________________ ! download KiXnet
Top

#70588 - 2002-10-07 09:41 AM Re: Cannot get Break command to work
Ghost Ghost Starting to like KiXtart Registered: 2000-09-14 Posts: 171	What about the console-less version of Kix? _________________________ Who are you? Who slips into my robot body and whispers to my ghost?
Top

#70589 - 2002-10-07 09:53 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	What console-less version of Kix would that be? Where do I get it? Please enlighten me!!
Top

#70590 - 2002-10-07 10:09 AM Re: Cannot get Break command to work
Ghost Ghost Starting to like KiXtart Registered: 2000-09-14 Posts: 171	You can download the latest version of Kix from here Click Me! I've got version 402, which includes the wkix32.exe, the console-less version. _________________________ Who are you? Who slips into my robot body and whispers to my ghost?
Top

#70591 - 2002-10-07 10:16 AM Re: Cannot get Break command to work
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	I can't see that the wkix is in any way linked to the current problem. on win9x it runs just the same as the console version as it needs to be started for those as: start /wait wkix32.exe script.kix meaning again that it is breakable. did you try the taking of the screen fully by the logonscript??? _________________________ ! download KiXnet
Top

#70592 - 2002-10-07 10:28 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	Lonkero is right, wkix32.exe doesn't run any different than kix32.exe. We have tried maximising the logonscript, but it doesn't stop them pressing CTRL-ALT-DEL. Cheers anyway
Top

#70593 - 2002-10-07 10:31 AM Re: Cannot get Break command to work
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	so, lets get back to it. are you saying that user is able to press ctrl+alt+del and end kix-process? if so, there is a bug as that should in no way be possible if you do not specifically give them the right by stating "break on". _________________________ ! download KiXnet
Top

#70594 - 2002-10-07 10:39 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	Yes, thats the problem. We understand it shouldn't be happening, but it does. We have updated to the most recent version, many times! It has always done it to us, and as I said, we didn't originally set it up. However, recently the students have found that they can do this, and it has become a problem. We understand it should forcibly log them off if they do manage to break to logon, but it doesn't do that either.
Top

#70595 - 2002-10-07 10:51 AM Re: Cannot get Break command to work
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	I've had some problems with the forced log off with new kix versions... 3.63 could be worth a try. then, how many "problematic" workstations you have? using the lmscript emulation should loose the boxes totally and so forth... _________________________ ! download KiXnet
Top

#70596 - 2002-10-07 10:54 AM Re: Cannot get Break command to work
Uffculme School Uffculme School Fresh Scripter Registered: 2002-10-04 Posts: 23 Loc: Uffculme, Devon, England	It does, or rather doesn't do, exactly the same on every single workstation we have, 150 of them. Where would I get 3.63?
Top

Page 1 of 2

Previous Topic View All Topics

Index Next Topic

Moderator: Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart

Hop to:

Shout Box

Search the board with:
superb Board Search
or try with google:

	Web kixtart.org