Bat file Protection
-
@scottalanmiller said in Bat file Protection:
@donaldlandru said in Bat file Protection:
@lakshmana said in Bat file Protection:
Having 15 Softwares like Adobe,Microsoft Office Package,Antivirus are packaged as .exe.
Where having 7 zip the friend able to see the files inside that .exe file
Inside the exe file the bat file is there for automation of the installation but the friend able to read that initialization of the commands for security reasons he should not see that file.This is the full storyI still don't understand what security risk there is your friend seeing silent install commands. Unless are you providing passwords to elevate the context the script runs in?
Basically he's got a friend acting as the administrator and he's trying to violate an immutable law of security - you always have to trust your administrators.
Now here i am admin and my friend is like guest account.
He there is no violation i am doing as of now -
@lakshmana said in Bat file Protection:
@scottalanmiller said in Bat file Protection:
@donaldlandru said in Bat file Protection:
@lakshmana said in Bat file Protection:
Having 15 Softwares like Adobe,Microsoft Office Package,Antivirus are packaged as .exe.
Where having 7 zip the friend able to see the files inside that .exe file
Inside the exe file the bat file is there for automation of the installation but the friend able to read that initialization of the commands for security reasons he should not see that file.This is the full storyI still don't understand what security risk there is your friend seeing silent install commands. Unless are you providing passwords to elevate the context the script runs in?
Basically he's got a friend acting as the administrator and he's trying to violate an immutable law of security - you always have to trust your administrators.
Now here i am admin and my friend is like guest account.
He there is no violation i am doing as of nowNo, if he's the one running the BAT file, he's the admin. This entire problem only exists if he is the admin. If you were the admin, he'd have no way to even know that a BAT file existed.
-
@scottalanmiller said in Bat file Protection:
@donaldlandru said in Bat file Protection:
@lakshmana said in Bat file Protection:
Having 15 Softwares like Adobe,Microsoft Office Package,Antivirus are packaged as .exe.
Where having 7 zip the friend able to see the files inside that .exe file
Inside the exe file the bat file is there for automation of the installation but the friend able to read that initialization of the commands for security reasons he should not see that file.This is the full storyI still don't understand what security risk there is your friend seeing silent install commands. Unless are you providing passwords to elevate the context the script runs in?
Basically he's got a friend acting as the administrator and he's trying to violate an immutable law of security - you always have to trust your administrators.
-
yes you comes to the point now.I am admin with .exe file where the .bat file is there inside .exe.The friend opened the .exe with the help of .zip or 7 zip.He should not do that and should not read the .bat file too
-
@lakshmana said in Bat file Protection:
yes you comes to the point now.I am admin with .exe file where the .bat file is there inside .exe.The friend opened the .exe with the help of .zip or 7 zip.He should not do that and should not read the .bat file too
Why does your friend see the BAT file at all? If you are the admin, there is no need for him to have access to the BAT.
-
And around and around we go.
-
@scottalanmiller said in Bat file Protection:
And around and around we go.
-
Ok maybe I am slow but I am piecing this together.
The .exe is probably a self extracting zip file. Inside is a bunch of installers and a batch file to run them.
Just stop doing this now. Grab PDQ Deploy or ninite or any other number of tools. Use sodium for the inventory portion.
-
Problems:
- There is no reason to have a BAT file at all.
- As the admin, there is no reason for anyone but you to see your files.
- As a general script, there is no reason for you to care if anyone sees the file.
None of this makes sense. Fix ANY of these major three problems and everything is solved.
So we are lost because...
- Why is there a BAT file at all (answer: no good reason)
- Why is your friend getting access to the file in any form if he's not the admin (answer: he's the actual admin)
- Why do you care? (answer: no reason)
-
@donaldlandru said in Bat file Protection:
The .exe is probably a self extracting zip file. Inside is a bunch of installers and a batch file to run them.
There is no exe, he's stuck on things that he thinks are encryption. And he's confused and thinks that encrypted files can't be read by the admin.
-
@scottalanmiller I was referring to this. He mentions an action involving 7zip and an exe file
@scottalanmiller said in Bat file Protection:
The friend opened the .exe with the help of .zip or 7 zip.He should not do that and should not read the .bat file too
-
@donaldlandru said in Bat file Protection:
@scottalanmiller I was referring to this. He mentions an action involving 7zip and an exe file
@scottalanmiller said in Bat file Protection:
The friend opened the .exe with the help of .zip or 7 zip.He should not do that and should not read the .bat file too
I know, but it's from the confusion and not part of his goals.
-
@scottalanmiller said in Bat file Protection:
om the confusion and not part of his goals.
But goal is correct you people confused with .exe and .bat file i think
-
@lakshmana said in Bat file Protection:
@scottalanmiller said in Bat file Protection:
om the confusion and not part of his goals.
But goal is correct you people confused with .exe and .bat file i think
I am not drunk enough for this. GL @scottalanmiller
-
@lakshmana said in Bat file Protection:
@scottalanmiller said in Bat file Protection:
om the confusion and not part of his goals.
But goal is correct you people confused with .exe and .bat file i think
Right, you need to stop talking about files completely. When asking questions like this, you need to ask about how to achieve your goals. Instead, you consistently invent a terrible or impossible solution and try to get us to help with that instead of helping with what you actually need to accomplish.
Imagine if you wanted to go to the store. But instead of asking us how to get to the store you decided that the best way to get there is to fly. But you don't have a pilot's license. So you ask us questions about the best place to learn to fly. And we keep asking "why do you want to fly?" And you keep saying "Because my friend doesn't have a boat." And we say "What does that mean?"
And never once does "I want to go to the store" ever get said. Had it been said, we'd have said "Oh, just call a taxi, it's around the corner."
That's what this threat is like. You want to go to the store, but you are obsessed with flying there and because you can't afford an airplane ticket you are trying to become a pilot to do so and asking about something that has nothing to do with your goals.
-
@scottalanmiller Big and Good Example i will ping in Chat
-
I really think that Sodium might be all that you need. Trying to read between the lines, I think that you just need a proper administration tool that does the pieces that you need.
-
As discussed in Chat you found the process
-
There is no good option, sadly. Given the limitations the situation is that the end user is required to have access to the files. Making an exe would be easiest, but doesn't solve the problem.
-
The End
