On 25 Jul 2002 at 6:42, Saraga, Scott l wrote: > You could delete the Net.exe from the systems and use VBScript to map all > drives as it does not use Net.exe. But it would be too easy to bring in > Net.exe on floppy.
Perhaps renaming NET.EXE to NET_.EXE and writing a batch file NET.BAT that checks for "SEND" "send" "SeNd" etc as %1 and passes over that, allowing all other command-line options of NET, would be a useful way to go. You could even have the batch-file log attempts to use NET SEND for disciplinary reasons. The logs could capture the command-line to determine which are really attempts to hack and which are just misteaks. There are batch-file compilers (BAT2EXEC? BAT2EXE?) that will compile the batch file so the kiddies will be further insulated from what's going on. However, this will only stop most of the NETSEND kiddies, not the determined ones (who may still be try bringing in their own NET.EXE somehow). --------------------------------------------------------- Angus Scott-Fleming GeoApps, Tucson, Arizona [EMAIL PROTECTED] 1-520-290-5038 / fax 1-208-248-3124 --------------------------------------------------------- ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
