[THIN] Re: Only allow specified apps.

  • From: "Jeff Durbin" <techlists@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Tue, 9 Dec 2003 20:50:16 +1300

  I don't understand why people seem to be so eager to buy a product when
they can get adequate functionality for free. Group Policy is there and
surely you're using it anyway. AppSec is free and very simple to use. I
disagree with the statement that "a 3rd party product for desktop lockdown
is just about mandatory". AppSec and "Run only" via Group Policy give you
100% control of what apps the users run. They can email themselves apps all
day long, but they can't run them. Am I wrong about this?
  
Jeff Durbin

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Rob Beekmans
Sent: 8 December 2003 1:00 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Only allow specified apps.


Hi Robert,

The easiest way to get them frustrated is by using PowerFuse from RES.NL
It's not my favorite as anyone on this list might have seen, but I have to
be fair for the reason you are telling it's simply the best solution. I'm
runningit with several customers where they have (let's be nice) not to
smart users...and those who think they know computers becasue at home they
chatt the whole evening.  Nowdays they can't mail themselves any programs
(even renamed onces) or start any program stored in their homedrive (which
they hope I'll miss on my next scan). It gives you cood control over waht
they are doing and provides you with an underwater view to debug.



Met vriendelijke groeten / With kind regards
 
Rob Beekmans
Technical Consultant
A-Tree Automatisering
 
Business Phone: +31 24 6452000
Business Fax: +31 24 6450463
Business website: http://www.a-tree.nl
Business E-mail: R.Beekmans@xxxxxxxxx
 
Private E-mail: RobBeekmans@xxxxxxxxxxxxx
Private website: http://joulupukki.nl
 

-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Mack, Rick
Verzonden: zondag 7 december 2003 10:26
Aan: 'thin@xxxxxxxxxxxxx'
Onderwerp: [THIN] Re: Only allow specified apps.


Hi Jeff,

Agreed, appsec is pretty simple-minded.

If you want real security, then a 3rd party product for desktop lockdown is
just about mandatory.

The other alternative is Windows server 2003 and software restriction
policies.

Regards,

Rick

Ulrich Mack
rmack@xxxxxxxxxxxxxx
Volante Systems
18 Heussler Terrace, Milton 4064
Queensland Australia
tel +61 7 32467704



********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: