Dom
Member
Registered: 13th Sep 03
User status: Offline
|
We have a problem with the students downloading or bringing in via usb sticks flash games, usually in SWF format, and then running them using IE. I know it's possible to stop flash running under IE (could cause numerous problems if we did this), but is it possible, either via Group polices or another method, of stopping students executing swf files in IE, and/or downloading swf files (ie: right mouse click save etc) and/or blocking swf files being transfered from usb sticks?
We're also running RM if there is a method using the RM console - have raised the issue a few times but nothing has come about it 
tar all 
|
pow
Premium Member
Registered: 11th Sep 06
Location: Hazlemere, Buckinghamshire
User status: Offline
|
Why don't you change the SWF files to open with notepad or something when they are double clicked?
|
Neo
Member
Registered: 20th Feb 07
Location: Essex
User status: Offline
|
Should be able to stop the running .swf files, unless they use them as part of their course.
When i worked in a school, all we would do is a search of EXE's and SWF's on a friday night and delete anything weird, after making a copy.
You could also disable the use of USB drives (i.e. restrict drive letters) so they aren't recognised ? and if they need to transfer work create an FTP server they can use which is connected with their account ?
|
pow
Premium Member
Registered: 11th Sep 06
Location: Hazlemere, Buckinghamshire
User status: Offline
|
Tbh, I'd have banned the mempry sticks for the pupils. We had that at school, had to get the teachers to download work.
|
Aaron
Member
Registered: 9th Aug 04
Location: Cottingham, East Riding
User status: Offline
|
We use software called Browse Control. It does the following
Internet Control (On/Off)
Port Filtering
USB Blocking
CD/DVD Drive Blocking
Wake on LAN
Remote Shutdown/Re-boot
Thats just to name a few.
This software would solve all your problems and its very cheap for schools 
Made by a company called CodeWork based in Manchester
|
Dom
Member
Registered: 13th Sep 03
User status: Offline
|
Can't disable the use of USB sticks as it would cause more headaches than this is worth, plus the students are required to do their own backups just incase anything happens (we obviously have a daily backup system, but we can't guaranty this).
But i think i have found a possible solution using Software Restriction polices that allows you to restrict use of programs via md5 hashes and paths etc Will give it a go and see what happens.
Neo - scans are usually done for swf, but it's almost a days job going through the files making sure they are work or not. Banning swfs from our system would be less of a headache.
Pow - changing swf's to open in notepad, wouldn't solve the problem of the kids drag+dropping the files into IE. You would think that the all-in-one-super-dooper-piece-o-crap also known as RM would have a solution for this, but like i say they haven't got a clue 
Aaron - good looking piece of software, but it doesn't seem to be able to block file types and everything it can do we can do via polices, RM system and our Fortinet firewall/proxy server. Plus it isn't a cheap solution at £2850 per server - if it's just AD servers then it'll cost us near enough 12k and if we have to get all the servers covered then it's near enough 30k 
Cheers for the help though, will have a look at software restrictions and see what happens
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
Change permission on flashXe.OCX (X being the version you're running)
|
