Dos Help For Script

[stealthagent]

i am currently the admin of a novell network, and we have casel, and deepfreeze installed on everycomputer, students log in as power users, some of the students have been abusing the net send command in dos, i do not want to go to every computer in the school and log in, unthaw it, delete the net.exe , reboot, and freeze them... i had an idea of adding somthing to the login bat file that runs whenever a user boots, is there a command that i can make it so when they type net in dos, it dosn't reffer to C:\system32\net.exe, and make it run to a file on the network?

[scuzzman]

And make it have precedence over net.exe? Probably not.

The better thing to do would be to change the properties of net.exe and restrict it to admin only, but then you have to thaw and refreeze each system.

[Agent Smith]

What version of Novell are you using stealthagent? And do you have Zenworks running on your network? I would have thought you could be able to change what is required with an application object, providing all your machines are imported and inventoried.

[Agent Smith]

Actually, I have just been thinking about this, and you should be able to use a batch file to run cacls to change the file attributes for net.exe, so it is for admin only.

I think the line should go something like this

cacls c:\system32\net.exe /E /D user

replace user with whatever the poweruser account is called (I assume you have single computer accounts which are force logged in), eg student

I am not able to verify that syntax at the moment, so I suggest you check properly prior to using it. Have a play, you may prefer to revoke or simply change some of the rights, rather than removing them.

Good Luck.