OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brad (gryphonnaustarnet.com.au)
Date: Sat Nov 10 2001 - 17:36:45 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 9 Nov 2001 at 17:02, Kevin Martin wrote:

    From: Kevin Martin <KMartinxcaliber.com>
    To: focus-mssecurityfocus.com
    Subject: Can you disable shutdown but not restart?
    Date sent: Fri, 9 Nov 2001 17:02:39 -0600

    > Is there a registry setting or policy that can be set to remove the ability
    > of users to do a shutdown of their system while still enabling them to do a
    > restart? This would keep users from "stopping" their machines and
    > disabling the ability of automated update technology to do updates overnight
    > while still giving them the ability to do a reboot when things get funky on
    > their workstation. This is in a combined NT4/Win2k/WinXP environment. I'm
    > already planning on disabling the power button so hard powering down the box
    > will be disabled (except for pulling the plug) so this is the last piece of
    > the puzzle.
    >
    > Thanks.
    >
    > Kevin Martin kmartinxcaliber.com
    > Stafford Trading Inc. Chief Security Officer
    > Chicago, IL 60604 TEL +1-312.356.4849
    > 230 S. LaSalle, Ste. 688
    >

    Hi Kevin and all

    You might want to try a resource hacking tool and hide the buttons or options to shutdown the system. have a look at:

    http://rpi.net.au/~ajohnson/resourcehacker/

    It will give you the opportunity to do all sorts of modifications to system dlls and executables. Given that there are a number of ways to shutdown a system, I doubt you'll
    find an easy way around your challenge.

    Also note that if you modify a system file under Win2K, you will also have to modify the file in the file protection cache, otherwise it will be restored on reboot to the original
    (IIRC).

    Cheers

    --
    Brad Griffin
    Gryphonn Design
    Computer Security Solutions
    Custom designed systems
    Upgrades, components
    Ph: 0409057865
    195 George Street
    Rockhampton QLD 4700
    ABN: 12 095 821 961
    ***************************