Software monitoring package

[zxarr]

Hi there,

I'm looking for a software monitoring tool for a network. What I'd like is something that sits in the background and looks for certain processes that start (msmsgr.exe, command.com, etc) and stops any user with less than Administrator privelages from running said software.

The software should grab a list of bad processes from a single server on the network and preferably can use LanMan authentication to say who is allowed and not allowed to use the process.

I have used the Group Policies in Windows 2000 and that only works for some things. People can still find ways of running 'command.com' and gaining access to the command line. All they need to do is bring in command.com on a floppy and I can't do anything about it. Floppy access cannot be restricted.

If anyone knows of such a beastie, please message me back.


Thanks.

 

[linney]

It's not quite up to your specifications but may be worth a look at.

http://www.diamondcs.com.au/processguard/

It has a lot more blocking capabilities than is mentioned in the short intro page. There is a free trial version to test.

 

[wagnj1]

That is fairly nifty, I can think of a lot of places I could use that.

 

[linney]

Well, if you want to check it out further this is as good a place.

http://www.wilderssecurity.com/archive/

Personally I have been using it since its release with no real problems. Although, still being relatively new, it is undergoing refinements all the time.