how to disable net send without stopping Messenger Servives

M

Marty List

hh said:
Does anyone know how to disable NET SEND without stopping
Messenger Services ?? Thanks


I think disabling the Messenger service prevents you from receiving
messages, but you
can still send them. Aside from disabling the messenger service, there is
no way to
prevent people from receiving messages 100% of the time. However, there are
some
things you can do to make it difficult. You prevent them from using things
like the command prompt and Start/Run using group policies.

You can try using a DOSKEY macro to redefine the NET command (make sure you
do one for "net" and one for "net.exe"). There are several ways to do this,
something
like this will only allow them to map drives, nothing else:

Doskey.exe Net=If /i "$1" EQU "Use" Net.exe Use $2 $3 $4 $5

Doskey.exe Net.exe=If /i "$1" EQU "Use" Net.exe Use $2 $3 $4 $5


Keep in mind that "net send" isn't the only way to send messages, so even if
you prevent them from using that command there's always going to be some way
to send messages from other downloaded tools, but most people won't know
how to do this.
 
G

Guest

try this, but doesn't work. Can you please explain more
about parameter Marty ?? Thanks
 
M

Marty List

try this, but doesn't work. Can you please explain more
about parameter Marty ?? Thanks

It works, I just tested it. DOSKEY macros only work from the command prompt
(CMD.EXE). Have you disabled The Start/Run command?

It's easy to stop people from receiving messages, but not if you don't want
to disable the Messenger service. I don't think there is any way of
stopping people from *sending* messages, unless you were to block the
NetBIOS ports with a firewall or IP filtering. This would also stop other
functionality like browsing or mapping drives.
 
G

Guest

Yes i did. i disabled RUN, as well as command dos prompt
from GP. I included these command lines(Doskey) in my user
logon. All I want is to disable users using NET SEND, but
ablle to use NET USE (to map drive). Thanks
 
M

Marty List

Yes i did. i disabled RUN, as well as command dos prompt
from GP. I included these command lines(Doskey) in my user
logon. All I want is to disable users using NET SEND, but
ablle to use NET USE (to map drive). Thanks


If you disabled RUN and the command prompt, then how are the users going to
run NET USE? And how are you testing this to know that NET SEND still
works? You need to provide more details in your posts.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top