Yeah, we got them setup ages ago by a company, most of the work we do on them is fine, and I had managed to lock down network neighbourhood/my network places nicely on the desktop and through windows explorer windows, using group policy. Also managed to prevent standalone exe's, batch files, registry keys and all sorts working on user's home directories AND USB drives lately. Basically kids mess around with anything!!
This hole in word really sucks, and kids can still go through Netlogon and run logon scripts and batch files... since they need access to it!! (w*****s).
Still some work to be done, but better than before.
|