Re: Restrict certain file types on a Windows 2000 share

If you want to make it even faster at killing files I would see if there's a wmi listener available for files that have been written then make the script a service that runs in the background.

Geoff

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: "Nikhil Wagholikar" <visitnikhil@xxxxxxxxx>

Date: Sat, 8 Sep 2007 20:43:25
To:security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Restrict certain file types on a Windows 2000 share


HI Mary Hendrix,

Probably you could write a script (WSH or VBS) and store it in the
shared folder itself (with proper permissions so that others wouldn't
able to read and execute or modify its contents), containing a check
for any file other than .doc or .xls (and any other which you wish to
be stored). If this script finds any such file (other than .doc and
.xls), it should execute a delete command on such files.

----
Nikhil Wagholikar
Information Security Analyst
NII Consulting
Web: http://www.niiconsulting.com


On 9/7/07, Mary Hendrix <maryhendrix@xxxxxxxxx> wrote:
Hey there,

First I would like to thank all the answers I've received on my previous post.

Second, I was wondering if there is a way to prevent users from
storing mp3 or other file types on a shared disc that is supposed to
be used only to store .doc, .xls and so.

Thanks in advance

Mary

Relevant Pages

  • Re: Restrict certain file types on a Windows 2000 share
    ... Probably you could write a script and store it in the ... shared folder itself (with proper permissions so that others wouldn't ... .xls), it should execute a delete command on such files. ...
    (Security-Basics)
  • Re: Will Linux become as vulnerable as MS ??
    ... > beeing vulnerable to viruses. ... > that they know are executable, and execute intentionally. ... >> Linux, each distro is a little different, and even within the distro, ... > Since clicking on a script is easier than typing it's name, ...
    (comp.os.linux.security)
  • Re: Small, understandable Forth
    ... intelligence from the word to the script. ... niclos file script files, but only in the directory in which they are ... \ there are required support vocabularies, ... RDROP EXECUTE DEFINITIONS; ...
    (comp.lang.forth)
  • Re: [Full-Disclosure] ColdFusion cross-site scripting security vulnerability of an error page
    ... > execute the arbitrary javascript and HTML code which the attacker ... > It is possible to display the contents transmitted from the client ... > cross-site scripting attack can be executed. ... the script will be executed when the script for an attack ...
    (Full-Disclosure)