Apps You Might Want to Ban: Part 2
Novell Cool Solutions: Trench
By Andrew White
Digg This -
Posted: 1 Apr 2004
This contribution from the Network Manager at Salisbury College, UK, is a bit longer than usual, so we put it in this separate article. It was written in response to an Open Call about Apps You Might Want to Ban. See the other entries here.
For more information on Rogue Process Management see this section of the documentation.
I use the third-party application ScanWindows 1.0.5 which is available from Cool Tools http://www.novell.com/coolsolutions/tools/1609.html
I have a force run application that does the following:
- Distributes scanwin.exe and MSSTDFMT.DLL to the windows directory of each workstation and these are set to distribute always and copy if doesn't exist.
- Distributes my centrally maintained control file (my current version is attached below) which because it's just a text file, you can call anything and save anywhere as long as the workstation can see. I call mine salcol.dll and it hides in the windows system directory ( I have this set to distribute always and copy always so they always get the latest version)
- Run C:\WINNT\ScanWin.exe with the startup switch /deny:c:\winnt\system32\salcol.dll or wherever else you choose to put the control file.
- Job done. This setup runs on over 1000 workstations and daily annoys over 15,000 students...
Once in a while (usually when I'm in a bad mood), I manually scan user areas for .exe files and add any I don't want to run on my network to the control file.
Salcol.dll control file attached as an example
; All comments are preceded by a semicolon. Everything after the semicolon (";")is ignored. ; All comparisons are case insensitive. ; The commands to set the contents of the program disabled warning box are ; disableddialogboxtitle = Title for Box. ;Sets the Title of the Program Disabled dialog box ; disableddialogboxmessage = Warning message for box ;Sets the warning message in the Program Disabled dialog box ; DisabledDialogButtonText = Button Text ;Sets the caption of the OK button in the Program Disabled dialog box ; If the characters "CRLF" are found a new line will be inserted at that point. disableddialogboxtitle = Student Network Application Control. ;Sets the Title of the Program Disabled dialog box disableddialogboxmessage = A program this PC is trying to run has been blocked by IT Services. CRLF If this restriction is wrong or you wish to request removal of this software, please pop into W202 or use the help requestor;Sets the warning message in the Program Disabled dialog box DisabledDialogButtonText = Please press here to continue working ;Sets the caption of the OK button in the Program Disabled dialog box AIM.EXE;AOL Instant Messenger FSG.EXE;Gator Subprogram GATOR.EXE;Gator ICQ.EXE;ICQ Client IMICI.EXE;IMICI Messenger MESSENGER.EXE;Excite Messenger MSMSGS.EXE;MSN Messenger MSNMSGR.EXE;MSN Messenger MSN6.EXE;MSN Explorer NAPSTER.EXE;Napster NETD.EXE;Odigo NetDetector OFFERS.EXE;OfferCompanion OBRW.EXE;Odigo Companion EXE ODIGO.EXE;Odigo Instant Messenger SNOOD.EXE;Snood (Addictive Game) TRILLAN.EXE;Trillian Instant Messenger YPAGER.EXE;Yahoo! Messenger YMSGR_TRAY.EXE;Yahoo! Messenger TrayIcon WHANCER.EXE;webHancer Spyware Program ; EXE's found on the Student Network AFARK.EXE AFLEA.EXE ASCARAB.EXE AVIPREVIEW.EXE AVP.EXE BOARDGAMES.EXE SBCLIENT.EXE CCQUERY.EXE CDEX.EXE CHAOS.EXE CHAOS320.EXE CHAT.EXE CHAT BASIC.EXE CHATBASICCLIENT.EXE CHATBASICSERVER.EXE CHEDGE.EXE CHESS.EXE CLMLATOR.EXE CLIENT.EXE CLOKSPL.EXE CROCTECH.EXE DEUSEX.EXE DF.EXE DGEN.EXE DOS4GW.EXE ELMA.EXE EMPIRES.EXE EMPIRESX.EXE ICED.EXE JETSKI.EXE KAZAA.EXE KAZAALITE.EXE KAHLI.EXE KEYGEN.EXE KMD.EXE LANCHAT_EN.EXE MAEKA.EXE MAEKASETUP.EXE MEGASIS.EXE MICA.EXE MOOR1.EXE MPASMWIN.EXE MPLAYNOW.EXE MULTICHAT.EXE NCHAT.EXE NECRO.EXE NESTICLE.EXE NETCRACK.EXE NETSEND.EXE NGSTATUSUT.EXE NGWORLDSTATUS.EXE NOTEMAID.EXE NOVAWRLD.EXE OFP_SERVER.EXE OPERATIONFLASHPOINT.EXE OSKA.EXE OSKASETUP.EXE PYTHON.EXE PYTHONW.EXE QUAKE3.EXE REBOOT.EXE RELAPSE.EXE REVUPDAT.EXE ROMCMP.EXE ROOM.EXE SIG2DAT.EXE SMS_PLUS.EXE SNES9XW.EXE SOCKETCHAT.EXE SOCKETSERVER.EXE SOCKS2HTTP.EXE SPITOON.EXE STRIPSAVER.EXE SWARM.EXE TA1X-31C.EXE TAHNI.EXE TAHNISETUP.EXE TANK.EXE TEECEE_SETUP.EXE TERRAN.EXE TOTALA.EXE UCC.EXE UNCC.EXE UNREALED.EXE UNREALTOURNAMENT.EXE VISUALBOYADVANCE.EXE W9XPOPEN.EXE WA.EXE XEVIL.EXE ZSNESW.EXE
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com