myspacee Posted April 16, 2009 Posted April 16, 2009 Hello to all, i've a malicius user that come in office before job time, do suspicius activities then shutdown pc and go home. For law in my contry i can't record its PC activity or room where him works. So i receive task to stop its activity. I'e idea to do script that allow .exe run only in a range of time, maybe a command line tool: script my.exe [start time] [until time] [text message] But i've no idea how to start... anyone can help ? thank you, m.
jvanegmond Posted April 16, 2009 Posted April 16, 2009 (edited) Use a windows domain. Keep track of your users. See who logs off and on at what times. Use a camera at the entrance of the building. And a fyi: I'm only suggesting this because allowing an executable only in a certain period is not a good idea. Edited April 16, 2009 by Manadar github.com/jvanegmond
Tec Posted April 16, 2009 Posted April 16, 2009 Use User Logon Script to find the User an the PC Test this logon.bat echo OFF set DATUM=%DATE:~-2%-%DATE:~-7,2%-%DATE:~-10,2% echo %DATE% %TIME% PC: %COMPUTERNAME% USER: %USERNAME% >> \\fileserver\logs\%DATUM%.log
myspacee Posted April 16, 2009 Author Posted April 16, 2009 thank you for reply, can't build a domain only for this, and law for camera is very stricly (not allowed in pubblic areas) I know pc where activity is done. And keylogger is installed. I have all information about user and time. Unfortunly this PC has generic user that allow different users to gain access to PC. My malicius user choose this pc for this, i think. Mana why you think that run .exe in a certain period is not a good idea ? (domain environment allow this if i remember well) m.
Tec Posted April 16, 2009 Posted April 16, 2009 Ok here is a other solution for your problem.Start cmd and type "net help user"There is a option /TIMES with this you can configure logon hours for a user.Example:net user "user account" /time:M-F,8:00-16:00User has rights to access its account between 8 and 16 every day from Monday to Friday.You can even setup time intervals for different days as following:net user "user account" /time:W,10am-5pm;T,2pm-3pm;F-Sa,9:00-16:00 One more thing, the week days' abbreviations are M, T, W, Th, F, Sa, Su.
jvanegmond Posted April 16, 2009 Posted April 16, 2009 Yes, that is quite a good idea actually. Or make sure that you are the only one who can log in at the morning. github.com/jvanegmond
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now