×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Closing Windows NOW!
3

Closing Windows NOW!

Closing Windows NOW!

(OP)
I am in "control" of a project designed to prevent unauthorized installation of software on our company's many computers. The OS ranges from Win 3.0 to Win 2000(?). I need to shut them down and make sure they stay shut down if they install a new program. I have developed a system that does the same -- by by-passing DOS -- but I have received only complaints from the compliant users who only had to boot their systems and wait for 5 minutes to do their job. I need a way to "catch" the new installations when they "happen". Using VB 6.0. Thanks in Advance.

RE: Closing Windows NOW!

Ouch! Given the range of OS's this doesn't sound easy.

My first reaction would be to buy something that can do the job - standardize on NT4 and lock users out of the desktop "in an agressive fashion" then buy a s/w distribution tool. This is not a trivial project. When you say "many" computers - how many is "many"?

Mike

RE: Closing Windows NOW!

(OP)
Sorry Mike. Not many. Only 53 at the target site. It just seems like "many" since most of them aren't networked. NT would be the answer to a dream but the money-men won't let it happen. My cheaper solution has been to change COMSPEC to point to a start-up batch file in a folder Win9.x claims to be non-existent. The BAT calls a program to check or change the LOAD line in WIN.INI, checks for tampering, IF NOT start Windows, IF SO run a full audit of every EXE, COM, DLL, and OV? on the hard drive. The Win component remains unobtrusive, as long as there are no new applications and there wasn't an attempt to by-pass the audit.
I feel bad that my job has expanded to include the coding of Trojans. But, It's a job. It's what my employer wants. Once again, I'm sorry. God help us all.
Alt255

RE: Closing Windows NOW!

For the DOS/Win3 machines there's a product called disklock which I used to use - makes it so users can only read floppy disks that have been approved - if they can't read floppy's they probably can't install from them. Dr Solomon - as I recall.

The NT boxes - you can probably do a lot with directory permissions and restricted user logins.

It's difficult for me to stress this enough without being physcially present.

*DON'T* *WRITE* *THIS* *YOURSELF* -- *BUY* *SOMETHING*

Life's too short mate - you'll give yourself a hernia and it won't be as good as some cheap thing you can buy.

Mike

RE: Closing Windows NOW!

(OP)
Thanks for the very good advice. My grandfather used to joke "If you want a job done right, hire someone to do it for you. You can get your money back after the first mistake."

RE: Closing Windows NOW!

(OP)
Tried that. The solution isn't for sale. My employer is very firm. I'm in beta now. Any attempt to install unauthorized software shuts down the system.
Any attempt to tamper with the trojan or terminate it shuts down the system.
It's a nice little hook. Bill Gates would throw a fit if he knew what he allowed his programmers to write.

Thanks again. I'm not sorry anymore... just doing my job.

Regards

RE: Closing Windows NOW!

2
Well, I have an idea.....can you make VB copy a file when an install is detected? If so, I can write a batch program for you that will keep the computer from being restarted.


-Robherc

RE: Closing Windows NOW!

(OP)
Great! My program writes a line to a hidden log and sets a binary marker in a file before it calls the ExitWindowsEX function. It would take a fraction of a second to copy a small file. If I could keep the users from starting their computers again (without an authorized technician on hand to oversee the process) I would be ten miles closer to the final solution.
Catching them is one thing, stopping them has proven somewhat harder. (Short of trashing boot records and wiping the CMOS -- perhaps a touch of overkill.)
I'll be glad to hear from you!!!!!!!!

RE: Closing Windows NOW!

MAN!...I'm REALLY sorry it took me this long to respond...haven't been watching this forum very closely as I know NOTHING about VB...therefore I had briefly forgotten about needing to check back with you.

Anywise; if you can send me a SIGNED PREFFERABLY e-mail message to:
robherc@netzero.net
I can send you a signed message in return & we can exchange the necessary (somewhat classified) information necessary to complete this project to each other via encrypted communications.

The batch program that I am thinking of will TEMPORARILY replace the AUTOEXEC.BAT file on the client computer with another file that will set a few variables, & make it HARD (though not QUITE impossible to use the system w/o a high-tech password)
Hope to hear from you again soon and, once again, sorry about the dalay in my response.


-Robherc
robherc@netzero.net

RE: Closing Windows NOW!

(OP)
I'd give you FIVE TipMasters for this one. But I'm pretty sure the rules allow only one per customer.
Thanks a million. Maybe we'll make one some day.

RE: Closing Windows NOW!

(OP)
Sorry about the redundancy... "time out error", bit-bucket existential fear, transmission uncertainty, etc etc etc.
Anyway, you've made my day, maybe you've saved my job. If you have any more thoughts... please share with the community. We all have a need to know. (and don't preface your tips with "I don't know very much about...")
My thanks!

RE: Closing Windows NOW!

Thanks for the gratitude! I'm glad I have been able to help you...after all; that's my basic point in being in here in the first place :-)

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login


Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close