Apps You Might Want to Ban: Part 2
Novell Cool Solutions: Trench
By Andrew White
|
Digg This -
Slashdot This
Posted: 1 Apr 2004 |
This contribution from the Network Manager at Salisbury College, UK, is a bit longer than usual, so we put it in this separate article. It was written in response to an Open Call about Apps You Might Want to Ban. See the other entries here.
For more information on Rogue Process Management see this section of the documentation.
I use the third-party application ScanWindows 1.0.5 which is available from Cool Tools http://www.novell.com/coolsolutions/tools/1609.html
I have a force run application that does the following:
- Distributes scanwin.exe and MSSTDFMT.DLL to the windows directory of each workstation and these are set to distribute always and copy if doesn't exist.
- Distributes my centrally maintained control file (my current version is attached below) which because it's just a text file, you can call anything and save anywhere as long as the workstation can see. I call mine salcol.dll and it hides in the windows system directory ( I have this set to distribute always and copy always so they always get the latest version)
- Run C:\WINNT\ScanWin.exe with the startup switch /deny:c:\winnt\system32\salcol.dll or wherever else you choose to put the control file.
- Job done. This setup runs on over 1000 workstations and daily annoys over 15,000 students...
Once in a while (usually when I'm in a bad mood), I manually scan user areas for .exe files and add any I don't want to run on my network to the control file.
Example
Salcol.dll control file attached as an example
; All comments are preceded by a semicolon. Everything after the
semicolon (";")is ignored.
; All comparisons are case insensitive.
; The commands to set the contents of the program disabled warning box
are
; disableddialogboxtitle = Title for Box. ;Sets the Title of the
Program Disabled dialog box
; disableddialogboxmessage = Warning message for box ;Sets the warning
message in the Program Disabled dialog box
; DisabledDialogButtonText = Button Text ;Sets the caption of the OK
button in the Program Disabled dialog box
; If the characters "CRLF" are found a new line will be inserted at
that point.
disableddialogboxtitle = Student Network Application Control. ;Sets
the Title of the Program Disabled dialog box
disableddialogboxmessage = A program this PC is trying to run has been
blocked by IT Services. CRLF If this restriction is wrong or you wish to
request removal of this software, please pop into W202 or use the help
requestor;Sets the warning message in the Program Disabled dialog box
DisabledDialogButtonText = Please press here to continue working ;Sets
the caption of the OK button in the Program Disabled dialog box
AIM.EXE;AOL Instant Messenger
FSG.EXE;Gator Subprogram
GATOR.EXE;Gator
ICQ.EXE;ICQ Client
IMICI.EXE;IMICI Messenger
MESSENGER.EXE;Excite Messenger
MSMSGS.EXE;MSN Messenger
MSNMSGR.EXE;MSN Messenger
MSN6.EXE;MSN Explorer
NAPSTER.EXE;Napster
NETD.EXE;Odigo NetDetector
OFFERS.EXE;OfferCompanion
OBRW.EXE;Odigo Companion EXE
ODIGO.EXE;Odigo Instant Messenger
SNOOD.EXE;Snood (Addictive Game)
TRILLAN.EXE;Trillian Instant Messenger
YPAGER.EXE;Yahoo! Messenger
YMSGR_TRAY.EXE;Yahoo! Messenger TrayIcon
WHANCER.EXE;webHancer Spyware Program
; EXE's found on the Student Network
AFARK.EXE
AFLEA.EXE
ASCARAB.EXE
AVIPREVIEW.EXE
AVP.EXE
BOARDGAMES.EXE
SBCLIENT.EXE
CCQUERY.EXE
CDEX.EXE
CHAOS.EXE
CHAOS320.EXE
CHAT.EXE
CHAT BASIC.EXE
CHATBASICCLIENT.EXE
CHATBASICSERVER.EXE
CHEDGE.EXE
CHESS.EXE
CLMLATOR.EXE
CLIENT.EXE
CLOKSPL.EXE
CROCTECH.EXE
DEUSEX.EXE
DF.EXE
DGEN.EXE
DOS4GW.EXE
ELMA.EXE
EMPIRES.EXE
EMPIRESX.EXE
ICED.EXE
JETSKI.EXE
KAZAA.EXE
KAZAALITE.EXE
KAHLI.EXE
KEYGEN.EXE
KMD.EXE
LANCHAT_EN.EXE
MAEKA.EXE
MAEKASETUP.EXE
MEGASIS.EXE
MICA.EXE
MOOR1.EXE
MPASMWIN.EXE
MPLAYNOW.EXE
MULTICHAT.EXE
NCHAT.EXE
NECRO.EXE
NESTICLE.EXE
NETCRACK.EXE
NETSEND.EXE
NGSTATUSUT.EXE
NGWORLDSTATUS.EXE
NOTEMAID.EXE
NOVAWRLD.EXE
OFP_SERVER.EXE
OPERATIONFLASHPOINT.EXE
OSKA.EXE
OSKASETUP.EXE
PYTHON.EXE
PYTHONW.EXE
QUAKE3.EXE
REBOOT.EXE
RELAPSE.EXE
REVUPDAT.EXE
ROMCMP.EXE
ROOM.EXE
SIG2DAT.EXE
SMS_PLUS.EXE
SNES9XW.EXE
SOCKETCHAT.EXE
SOCKETSERVER.EXE
SOCKS2HTTP.EXE
SPITOON.EXE
STRIPSAVER.EXE
SWARM.EXE
TA1X-31C.EXE
TAHNI.EXE
TAHNISETUP.EXE
TANK.EXE
TEECEE_SETUP.EXE
TERRAN.EXE
TOTALA.EXE
UCC.EXE
UNCC.EXE
UNREALED.EXE
UNREALTOURNAMENT.EXE
VISUALBOYADVANCE.EXE
W9XPOPEN.EXE
WA.EXE
XEVIL.EXE
ZSNESW.EXE
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com