I've been dealing with users who seem to think it is ok to circumvent our company screensaver/screen lock policies.
We used to use Mcafee which allowed me to block software by program name matching. in order to try to eliminate the use of mouse jigglers and programs that used keyboard input.. like pressing F15 every once in a while to keep the computer from going idle for too long.
Then these same users discovered that they could just rename the executable and it would work. So then I had to use the MD5 hash matching feature and that eliminated them being able to use these programs.
As of late, we have had users use media players and loop videos to keep the screen from locking.
I have implemented a GPO to allow the screen saver when using Windows Media Player so at least that won't be a problem anymore.
What do you all do to prevent mouse jigglers and keyboard keypress programs from being used?
The easiest way I can think of is to create a list of MD5 hashes for all the ones I can find and then write my own program to prevent these from being run.
This is fairly trivial as I already have a program I wrote that has code to check MD5 hashes for other purposes.
The only other hurdle I see is that there are apparently hardware mouse jigglers available for cheap that plug into a USB port. Getting and maintaining a list of the GUIDs of these different devices would be a pain but they could be blocked by a GPO.
We used to use Mcafee which allowed me to block software by program name matching. in order to try to eliminate the use of mouse jigglers and programs that used keyboard input.. like pressing F15 every once in a while to keep the computer from going idle for too long.
Then these same users discovered that they could just rename the executable and it would work. So then I had to use the MD5 hash matching feature and that eliminated them being able to use these programs.
As of late, we have had users use media players and loop videos to keep the screen from locking.
I have implemented a GPO to allow the screen saver when using Windows Media Player so at least that won't be a problem anymore.
What do you all do to prevent mouse jigglers and keyboard keypress programs from being used?
The easiest way I can think of is to create a list of MD5 hashes for all the ones I can find and then write my own program to prevent these from being run.
This is fairly trivial as I already have a program I wrote that has code to check MD5 hashes for other purposes.
The only other hurdle I see is that there are apparently hardware mouse jigglers available for cheap that plug into a USB port. Getting and maintaining a list of the GUIDs of these different devices would be a pain but they could be blocked by a GPO.