Re: Windows 98 Security

From: Super_Geek (RichardFalconer_at_thepostmaster.net)
Date: 07/11/03


Date: Fri, 11 Jul 2003 14:15:56 +0100


Craig O'Grady <ogradyc@freebrough.com> asks a question to do with PCs,
Super_Geek dives in and tries to help:
>Hello,
>
>I am an IT Technician in a school in the UK, I am using
>native windows 98 se workstations for the children to use
>the internet and word processing.
>I need to stop them downloading and installing programs on
>our hard drives, they recently got a virus onto our
>system, we somehow need to stop write access to the drive
>completely. is this possible??
>
>Thankyou

Removing write access to the hard disk would prevent programs
(educational,) from writing to registry, save files, or data files. This
is obviously not a good thing.
To prevent Viruses, get an anti-virus scanner. Preventing children from
downloading files is awkward and counter productive. in most cases, the
curiosity children have for the internet leads them round your
precautions. This may not be the case in a primary school, because the
children's knowledge of PCs is limited. Consequently, So I'd recommend a
third party program that would block access to 'My computer', 'New
Shortcut,' and folder options. This locks down the PC effectively, and
makes hard disk access *harder*. However, one can still access the H/d
from file dialogues such as those in office. To prevent the hard disk
from showing up on there can be achieved using policy editor (if my
memory serves me,) but would render the save function of MSWord pretty
useless.

Have a good think of exactly what you want to accomplish then re-post.
In the mean time, here are some links to things I mentioned above:

Virus Scan HouseCall:
======================
http://housecall.trendmicro.com/ [Virus scanning software available here
too)
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

FIREWALLS
==========
ZoneAlarm is the most widely used, but there's also www.agnitum.com,
www.kerio.com and www.sygate.com.
http://www.microsoft.com/security/articles/firewall.asp

General
=======
http://securityadmin.info/faq.htm#encryption
http://securityadmin.info/faq.htm#password9x
http://securityadmin.info/faq.htm#harden

There are many examples of third-party security software, but RM
Security is the best I've come across. It runs as a process called
windowgrab.exe that does not prevent sensitive settings dialogues from
being opened, but instead closes them all most immediately. RM's website
is listed in Googles' archives, so do a search to find it.

HTH!

-- 
Super_Geek, 16
"How do I set a laser printer to stun?"
-My website is currently under construction, but I'll post a link here soon forFAQs.


Relevant Pages

  • Re: Notice of intention to complain
    ... I made this statement in the hope that Symantec ... Even if there is an unknown virus, ... preventing ASPI.SYS from functioning properly when I boot from the floppy. ... start the machine without the boot sector of the hard disk being ...
    (alt.comp.anti-virus)
  • Re: W95.Henky.Gen
    ... Than it mucks with the hard disk and chances are it may be unrecoverable. ... If you are using WinME or WinXP, re-enable System Restore, reboot the PC ... | According to Norton's web site, this virus attacks .EXE ...
    (microsoft.public.security.virus)
  • Setting up XP for "Public" use
    ... The PCs will be for visitors to use and give them internet access plus standard Office apps. ... Whilst I am happy on how to configure the LAN to allow this and no more - I have never set up XP for shared, public, use. ... My first thought was that they each get given a hard disk in a caddy, which then becomes "theirs". ... I have a spare NT server licence and a suitable machine. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: "We dont do a seven-level wipe for a computer virus."
    ... Mr. Bloch had his computer's hard disk completely cleansed using a ... Department data-security standards. ... doesn't mention any computer virus. ... "We don't do a seven-level wipe for a virus," ...
    (alt.politics)
  • Re: Terrabites of storage
    ... And every time I filled the hard disk. ... my first computer had 16k of RAM and a tape backup. ... used to tell the story that back when he was in school in the 60s, ... have to come out with faster routers,, though. ...
    (rec.arts.sf.composition)