Messenger for administrator use only?

[Chris Pratt]

Hi all

Is there anyway to stop users (in our case college students) from sending
messages using net send but still allow administrators to send messages to
all the workstations - e.g. "The Internet will be down for the next
5mins..." etc..

Last year we simply shut down the messenger service on all the clients but
that stopped them recieving messages. Anyway to do it in a group policy or
AD?

Thanks in advance

Chris Pratt - MCP

 

[Chris White]

As long as your workstations are NTFS, you can try denying execute
permissions to %systemroot%\net.exe to anyone except the local system and
domain admins.

Regards,
Chris White

 

[Ray at]

Be aware of the side effects of this though, such as failure of "net use G:
\\server\share" in a logon script among other things.

Ray at work

 

[Chris White]

True. But there are ways around that too.... You could use the Run-As
feature.
-Chris