最近碰见的网络管理问题（禁止外传）

msdlya

最近在工作的碰见 一些特殊客户。

房产中介.   软件开发公司 的要求 ！


允许上网。禁止外传。


想听听无忧的 高手们有些什么意见？

msdlya

= =   雷倒了。。  60个人看过了 竟然回复就甭提了。 连抢沙发的都没一个

lvyanan

上次在哪个论坛看到一个要求破解他们公司的管理软件，就是具有这种功能的，帖子里提到软件名称，我忘了，到各论坛找了一遍，没找着，所以就没跟帖，不好意思，帮你顶一下吧。

qiudaowei

能不能把情况说具体点

lytome

不懂，帮顶一下，不过这个标题我以为楼主求助的问题禁止外传

bianlimit

和5楼的见解一样!

zdnight

这个要求比较高了，光靠windows本身（包括有域的环境，域的组策略也没法做到），需要用到第三方的专业软件或硬件才能实现了。

jiahe

读不懂什么意思，能不能说清楚一点。

夜の林

..上网行为管理软件

bluephonix

自己做就用IIs嘛，外购就用EPR之类的嘛

as8686886

在防火墙上设置禁止上传只能下载

七仙花

在路由里好像可以禁止数据上传的。

gdhoo

个人以为没有多大意义

用QQ等工具可以直接传文件

用博客等网页直接复制粘贴

peak8

楼主要表达什么意思，我还真没读出来。

Disney

允许上网可以只在路由上设置允许80端口数据，禁止其它的端口，比如邮箱

禁止外传的话，可以用注册表屏蔽USB端口对存储设备的识别

禁止用户使用USB存储地方法除了硬件上关闭USB端口外，还有软件的解决方法。

在硬件BIOS中屏蔽USB设备会造成所有USB设备无法使用，而现在要限制的仅是USB存储设备。

下文来自微软知识库，介绍了两种屏蔽USB设备的方法。一种是已经机器未连接过USB存储设备的情况下如何禁用，另一种是已经连接过USB存储设备的机器如何禁止的方法。



To Disable the Use of USB Storage DevicesTo disable the use of USB storage devices, use one or more of the following procedures, as appropriate to your situation:

If a USB Storage Device Is Not Already Installed on the ComputerIf a USB storage device is not already installed on the computer, assign the user or the group Deny permissions to the following files: • %SystemRoot%\Inf\Usbstor.pnf
• %SystemRoot%\Inf\Usbstor.inf
When you do so, users cannot install a USB storage device on the computer. To assign a user or group Deny permissions to the Usbstor.pnf and Usbstor.inf files, follow these steps: 1. Start Windows Explorer, and then locate the %SystemRoot%\Inf folder.
2. Right-click the Usbstor.pnf file, and then click Properties.
3. Click the Security tab.
4. In the Group or user names list, click the user or group that you want to set Deny permissions for.
5. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
Note In addition, add the System account to the Deny list.
6. Right-click the Usbstor.inf file, and then click Properties.
7. Click the Security tab.
8. In the Group or user names list, click the user or group that you want to set Deny permissions for.
9. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.


If a USB Storage Device Is Already Installed on the ComputerImportant This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/) How to back up and restore the registry in Windows
If a USB storage device is already installed on the computer, set the Start value in the following registry key to 4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
When you do so, the USB storage device does not work when the user connects the device to the computer. To set the Start value, follow these steps: 1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. Locate, and then click the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
  
4. In the right pane, double-click Start.
5. In the Value data box, type 4, click Hexadecimal (if it is not already selected), and then click OK.
6. Quit Registry Editor.

转自：http://od6d.com/article.asp?id=23

说白了，这些方法都是防君子不防小人

330770540

利用pgp软件全盘加密，文件拿到别的地方就是乱码的

dato

有专门的内容过滤软件的，不过价格不菲也没有试用机会应该能达到，至于端口之类的限定措施有限啊，条条大路能用的方法实在太多了。

lintel

使用带安全芯片的机器

lintel

好像叫做TPM