#70599 - 2002-10-07 11:14 AM
Re: Cannot get Break command to work
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
The Delphi one looked good, but there was no way of re-enabling the keyboard or mouse! The same problem occurs in VB.
I'll keep trawling.
|
|
Top
|
|
|
|
|
#70602 - 2002-10-07 03:54 PM
Re: Cannot get Break command to work
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
Hi all!!
Thanks to Lonkero, I have written the C++ exes, one to enable, and one to disable. ( See Editing MSNET32.dll ) We put the disable exe at the beginning of the script, and the enable one at the end. With that, and editing MSNET32.dll, there is no way out now!
If anyone wants the exes or the edited MSNET32.dll (On the "please wait while your logon script executes" dialog, the Cancel button is disabled and invisible) just email or private message me.
Thanks to all who contributed ![[Big Grin]](images/icons/grin.gif)
|
|
Top
|
|
|
|
#70604 - 2002-10-07 04:28 PM
Re: Cannot get Break command to work
|
Uffculme School
Fresh Scripter
Registered: 2002-10-04
Posts: 23
Loc: Uffculme, Devon, England
|
Hi, there's been a development.
You can have all the bits, but I need to rectify a few things first.
It would seem that on a slower machine than the one we were using (ie most of our workstations!) there is time to press control alt delete and stop it as it pops up. You have to be quick, but its possible. Thats if you run the CADDisable in the Kix script. If you run it in the batch file before start /wait kix32.exe, you can actually stop CAdDisab.
My office(and I ) are packing up and going home (were in a school) so I'll come back to it in the morning.
Cheers guys ![[Embarrassed]](images/icons/blush.gif)
|
|
Top
|
|
|
|
|
#70605 - 2002-10-07 04:30 PM
Re: Cannot get Break command to work
|
Jack Lothian
MM club member
Registered: 1999-10-22
Posts: 1169
Loc: Ottawa,Ontario, Canada
|
Our solution traps logoffs & re-initializes the registry but in schools security is not the only problem. A much more significant problem is students who don't log off & then the next student sits down & starts working on the 1st student's account. Another serious problem is students who switch machines during class without logging out. This kind of trouble is far worse on a day-to-day basis than the would-be-hackers because it happens frequently & it causes students to lose or mis-place their work. The complaining from the student & teachers becomes very serious if you don't address this.
We colour code the screens & screen-savers so a teacher can tell exactly what type of account is active & if the machine is in a proper logout status. At the start & end of classes the teacher can visually sweep the class to ensure all is well. Any machine not displaying the correct colours must be manually re-initialized by the teacher pressing a desktop icon.
We attempted to put in place a solution that both addresses security & ensured proper control of student's work.
A final note,
Schools are unique in many ways & their security needs are very different from private industry. In schools, security is a physical thing. You are trying to stop students from damaging the machine & OS. A student trying to high-jack a server or another student's machine is very rare. Stealing the mouse ball, putting pencils in the CD-ROM drive, deleting files, souping up the desktop & downloading games or porn are the order of the day.
One of the things that almost every successful system in schools has is an image refresh function. No matter what OS or security you have in a school, students will find a way to disable it. Without this refresh function, school labs will always be in a state of disfunctionality. You must be able to return the OS back to is orginal state every week & it must be relatively fast.
In my opinion, investing in this type of software is far more important than investing in security software. We spent most of our programming efforts on this function as well. In schools, these things are further complicated by the fact that really expensive corporate solutions are not financially feasible. (We use PCR-Dist a ghost derivative. They use to give it free to K-12 schools but it is still cheap & very powerful.)
I recommand you do a search of the web on computer security in schools & libraries. You will get lots of ideas.
Some further thoughts on security: Keyboard control is important because some hot keys bypass the registry restrictions. We use the freeware utilities "killf3" &"wkeykill". Also, junk wordpad & paint. Both allow creative students to circumvent restrictions. Paint in particular allows students to change the desktop.
Jooel,
An improved version of eliminating "ctrl-alt-del" utility is offered here:
DX21 software
Somebody on this board is related to this site but I forgot who. They have an extensive kixtart area as well.
[ 07. October 2002, 20:51: Message edited by: Jack Lothian ]
_________________________
Jack
|
|
Top
|
|
|
|
|
#70606 - 2002-10-07 11:53 PM
Re: Cannot get Break command to work
|
BrianTX
Korg Regular
Registered: 2002-04-01
Posts: 895
|
Hmm.. I have a thought... you could have a hidden script messing with the RUN key under local machine in the registry...
When the computer is booted, a RUN key will already exist that shuts down the computer OR makes it completely lock. A prior RUN key will be a script that checks whether or not there is a value (registry) set for logon script completed successfully and will remove the RUN key that locks the computer while spawning a process that will wait for the first process to complete and put the key back into the registry..... If you cancel the logon script, the machine will be locked.. If you log on and then log off and back on without the logon script, the machine will still be locked... Essentially, the moment the locking part is taken out of the registry will be a split second before it would have been executed, at which point it will be rewritten to the registry.
Just an idea.. probably could use some refinement.
Brian
[ 07. October 2002, 23:54: Message edited by: BrianTX ]
|
|
Top
|
|
|
|
Moderator: Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart
|
1 registered
(Allen)
and 675 anonymous users online.
|
|
|
![[Smile]](images/icons/smile.gif){kind=icon}
