PDA

Click to See Complete Forum and Search --> : how to disable or prevent user install or setup any software or system



clivenyong
Sep 18th, 2002, 11:27 PM
how to disable or prevent user install or setup any software or system
Who can tell how to write the vb code to prevent user to do that?

Thank you very much

jpritchard
Sep 19th, 2002, 07:42 AM
hi,

in windows these things are done via policies...

regedit and look at the following key

currentuser\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun

adding a subkey 1 with a value of install.exe will stop the current user running installs..

other common ones will be setup.exe, add as many and you need 2,3,4,...

there is lots of code in the forum that used the api to update the registry if you need to do this via vb...

hope that helps some, cheers, A.J.P.

clivenyong
Sep 19th, 2002, 11:45 PM
Thank You Very Much jpritchard

One more question
Actually i want to develop one software for my department
it is prevent user to install any unregister software.
so i need some more detail information to do that

1. how to i hide control panel, My computer, network and Recycle Bin and at start menu using vb?

2. How do i disable user right click in the mune bar (Start Button) to access window explore?

3. Any ideas for me to prevent user install or make any change in windows setting e.g. Wellpaper to develop this system?

If this system successfully develop i will post in vbworld for those people need this software!

Thank you very much

amitabh
Sep 20th, 2002, 12:51 AM
It seems that you need to tweak registry settings. You can trake a look at www.winguides.com/registry .

clivenyong
Sep 20th, 2002, 02:38 AM
when i try to edit the Registry
currentuser\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
create new string value as
setup.exe and value = 1
then after restart the pc but i still can install any software ?
anything wrong?

jpritchard
Sep 20th, 2002, 03:37 AM
hi - sorry - I wasnot clear enough...

(Im more use to writting code that deletes these entries.... :) )
---
create a new string under .....\Explorer\DisallowRun
"1" with a value "setup.exe" or whatever..(no quotes)

that should work... I hope.

I agree with amitabh - all that U want is in the registry and the guide is top notch....

clivenyong
Sep 25th, 2002, 09:41 PM
i did successfully prevent user setup any software.
but this program still under testing.
i will complete it as soo as possible.
thank for you all

THANK ALOT

Frans C
Sep 26th, 2002, 08:04 AM
What if the user renames Setup.exe?

I don't think you can secure Win9x, and on NT you don't have this problem, because only admins can install software.

amitabh
Sep 26th, 2002, 08:11 AM
Yes, this is simple turnaround, but you would be suprised to see many users fooled by it.

jpritchard
Sep 26th, 2002, 08:34 AM
hi,

A rename of the file will circumvent this... Sorry. So this wont work if a program can be renamed and run under a new name... (often a user will giv up at this point though...)

Sorry - I should have asked about the OS version. Although beleive that this should work on all versions (according to winguides atleast..) I think the security and win9x should never be mentioned in the same breath. My p.o.v is that 9x is naturtally insecure but that is only my opinion... (so please dont flame me)

Yes - Frans is absolutley right!! - moving to a -user- account is the best way...

----

Even with a user account - I am supprised what is do-able - Most of my -interesting- software was loaded via my original account (a -user- account). (Im talking about scanners,enumerators, port-redirectors et-tal) because their -installs- ran as whatever.exe and copied them selve to my drive and did no or minimal reg changes. (i.e. no formal install, service/object registration etc etc...) all under a -user- account.

cheers, A.J.P