Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"

New public beta: Microsoft Shared Computer Toolkit

June 29th 2005 in Uncategorized

Microsoft has released a public *BETA* of a utility called the “Shared Computer Toolkit”:
http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx


This is a very cool tool that can be installed on Windows XP SP2 systems by those who want to lock down their PCs but don’t know how, and don’t have a tame IT Department to help them out.


We have an amazing array of options to choose from when configuring the security of a shared system, including:


Numerous Start Menu restrictions including hiding Control Panel, Printer and Network Settings; removing the Run and Search options; hiding various folders; and even removing the Shut Down Button…


General settings including restricting access to the Command Prompt, Task Manager and Registry Editor, hiding the Recycle Bin, disabling right click, restricting access to Microsoft Management Console Utilities and preventing password changes…


Some very useful software restriction policies including ‘block any software outside of program files and the Winodws path from running’, ‘block default system tools from running’ and ‘block windows management tools that an admin could use to bypass toolkit security.


We can block internet access completely, prevent Internet Explorer from running, prevent Windows Messenger from running and prevent Microsoft Office programs from running.  VBA can be locked out.  There is even a session timer that forces a user to log off after a certain number of minutes, or if the system is idle. 


Access to hard drives can be locked out.


The above list of features is not comprehensive, simply the ones that I have found most useful. 


The restrictions are set per user, therefore you can have different restriction levels for different people who use the PC.


Shared Computer toolkit is a very powerful utility and should used with extreme care.  Do NOT go locking everything down for all users willy nilly, and if you are unsure, get expert advice from the support forum microsoft.public.windows.sharedaccess:


http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg=microsoft.public.windows.sharedaccess


Be warned – the ever popular PC game “Halo” won’t run if ‘block any software outside of program files and the Windows path from running’ is enabled (as my teenage son discovered to his disgust after I locked down his PC).  This is because Halo decrypts a stub file off the CD and places it within the users profile, where it is run to start the game.  Any other game that uses the same anti-piracy protocol will face the same problem.


FAQ page:
http://www.microsoft.com/windowsxp/sharedaccess/faq.mspx


One comment to...
“New public beta: Microsoft Shared Computer Toolkit”

Dan Sommer

would like to try your new toolkit


Ok, its been announced now, so now I can tell you about it.
IE will have RSS support:http://www.microsoft.com/presspass/press/2005/jun05/06-24RSSIntegrationPR.mspx
Movie about same here:http://wm.microsoft.com/ms/msnse/0506/25055/RSS/rss_longhorn_platform_2005_MBR.wmv
 
 

Previous Entry

See update 16 July 2005
This time it is “Windows Registry : SOFTWARE\Classes\AppID\bho.dll”, detected as ‘adgoblin’ by Trend:(Associated CLSID 59AEAD8A-6822-4794-AF2E-8CC27312E26E)
On my system, that CLSID is associated with TechSmith’s SnagIt product as its BHO AppID.
12 July:   I have an update on Trend Micro’s false positive for AdGoblin when Camtasia’s SnagIt product is installed.  I’ve been having an […]

Next Entry

Archives