I don't understand why people seem to be so eager to buy a product when they can get adequate functionality for free. Group Policy is there and surely you're using it anyway. AppSec is free and very simple to use. I disagree with the statement that "a 3rd party product for desktop lockdown is just about mandatory". AppSec and "Run only" via Group Policy give you 100% control of what apps the users run. They can email themselves apps all day long, but they can't run them. Am I wrong about this? Jeff Durbin -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Beekmans Sent: 8 December 2003 1:00 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Only allow specified apps. Hi Robert, The easiest way to get them frustrated is by using PowerFuse from RES.NL It's not my favorite as anyone on this list might have seen, but I have to be fair for the reason you are telling it's simply the best solution. I'm runningit with several customers where they have (let's be nice) not to smart users...and those who think they know computers becasue at home they chatt the whole evening. Nowdays they can't mail themselves any programs (even renamed onces) or start any program stored in their homedrive (which they hope I'll miss on my next scan). It gives you cood control over waht they are doing and provides you with an underwater view to debug. Met vriendelijke groeten / With kind regards Rob Beekmans Technical Consultant A-Tree Automatisering Business Phone: +31 24 6452000 Business Fax: +31 24 6450463 Business website: http://www.a-tree.nl Business E-mail: R.Beekmans@xxxxxxxxx Private E-mail: RobBeekmans@xxxxxxxxxxxxx Private website: http://joulupukki.nl -----Oorspronkelijk bericht----- Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens Mack, Rick Verzonden: zondag 7 december 2003 10:26 Aan: 'thin@xxxxxxxxxxxxx' Onderwerp: [THIN] Re: Only allow specified apps. Hi Jeff, Agreed, appsec is pretty simple-minded. If you want real security, then a 3rd party product for desktop lockdown is just about mandatory. The other alternative is Windows server 2003 and software restriction policies. Regards, Rick Ulrich Mack rmack@xxxxxxxxxxxxxx Volante Systems 18 Heussler Terrace, Milton 4064 Queensland Australia tel +61 7 32467704 ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=147 ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm