Restriction on Net Send Command

125 pts.
Tags:
Domain Controller
Networking
Hello all, is there any way that only Administrator is allow to use Net send command to send message in a domain. i want that no body is allowed to used net send cmd from his local computer to send message in Domain. i want to control or disable Net.exe command from domain controller. How it is Possible. Please tell me complete procedure or registry entry how to disable Net.exe command for particular user from Domain Controller. Thanks Muhammad Usman.

Answer Wiki

Thanks. We'll let you know when a new response is added.

in another article I read you can use a GPO to disable the alerter service on the workstations but that will cause them to not be able to receive the net send messages also. anyone else have any ideas?

I know there is a way in GPO to restrict access to the actual net send executable, it is located in the system32 directory, typically in <i>c:\windows\system32</i>. I will try to find it.

***edit***
here is the information that I found, courtesy Noah Murphy:

How do I use Group Policy to set File System permissions?

1. Open the policy you wish to use in the Group Policy Editor.
2. Navigate to Computer Configuration / Windows Settings / Security Settings / File System.

3. Right-click File System and press Add File.

4. Browse to the file or folder whose permissions you wish to configure, select it, and press OK.

5. In the Database Security for <File or Folder> dialog, set the permissions and press OK.

6. In the Add Object dialog, make your selection and press OK.

How do I use Group Policy to set Registry permissions?
1. Open the policy you wish to use in the Group Policy Editor.
2. Navigate to Computer Configuration / Windows Settings / Security Settings / Registry.

3. Right-click Registry and press Add Key.

4. Browse to the registry key whose permissions you wish to configure, select it, and press OK.

5. In the Database Security for <KeyName> dialog, set the permissions and press Apply and OK.

6. In the Add Object dialog, make your selection and press OK.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Genderhayes
    Used to control access to your NTPD Access to PC is restricted by username and password
    7,950 pointsBadges:
    report
  • Subhendu Sen
    Another way is that, click start > control panel > administrative tools > services > select messenger > properties (right click) and change the startup type to disabled with admin rights.
    29,780 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following