[THIN] Re: Only allow specified apps.

  • From: Robert Barrett <RobertB@xxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Thu, 11 Dec 2003 10:22:32 -0700

Okay, to get back to Appsec for a minute.  Unless I am wrong I can only lock
down the apps for admins vs non-admins is that correct?  ie. if I lock the
students I also lock the staff.
 
Third party is not an option unless they have a hell of a deal for
education.

Bob

  _____  

From: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx] 
Sent: Tuesday, December 09, 2003 2:37 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Only allow specified apps.



FWIW, I don't think you're wrong. 

With mandatory profiles, scripting, GPOs and appsec you can do a pretty 
good job at restricting what can be run. 

However, it does require a reasonable amount of expertise, and 
investment in time. Which can create a sorta of guru island. Nothing 
wrong with that, simply something that has to be appreciated. 

Commercial products can make much of this easier to deploy, without 
requiring the same degree of expertise, a comprehensive solution, and a 
feel-good, comfort-zone for management. 

Horses for courses, I guess. 

Neil 

> -----Original Message----- 
> From: Jeff Durbin [mailto:techlists@xxxxxxxxxxxxx
<mailto:techlists@xxxxxxxxxxxxx> ] 
> Sent: 09 December 2003 07:50 
> To: thin@xxxxxxxxxxxxx 
> Subject: [THIN] Re: Only allow specified apps. 
> 
> 
>   I don't understand why people seem to be so eager to buy a 
> product when they can get adequate functionality for free. 
> Group Policy is there and surely you're using it anyway. 
> AppSec is free and very simple to use. I disagree with the 
> statement that "a 3rd party product for desktop lockdown is 
> just about mandatory". AppSec and "Run only" via Group Policy 
> give you 100% control of what apps the users run. They can 
> email themselves apps all day long, but they can't run them. 
> Am I wrong about this? 
>   
> Jeff Durbin 

*********************************************** 
This e-mail and its attachments are confidential 
and are intended for the above named recipient 
only. If this has come to you in error, please 
notify the sender immediately and delete this 
e-mail from your system. 
You must take no action based on this, nor must 
you copy or disclose it or any part of its contents 
to any person or organisation. 
Statements and opinions contained in this email may 
not necessarily represent those of Littlewoods. 
Please note that e-mail communications may be monitored. 
The registered office of Littlewoods Limited and its 
subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. 
Registered number of Littlewoods Limited is 262152. 
************************************************ 

******************************************************** 
This Week's Sponsor - RTO Software / TScale 
What's keeping you from getting more from your terminal servers? Did you 
know, in most cases, CPU Utilization IS NOT the single biggest 
constraint to scaling up?! Get this free white paper to understand the 
real constraints & how to overcome them. SAVE MONEY by scaling-up rather 
than buying more servers. 
http://www.rtosoft.com/Enter.asp?ID=147
<http://www.rtosoft.com/Enter.asp?ID=147>  
********************************************************* 
Useful Thin Client Computing Links are available at: 
http://thethin.net/links.cfm <http://thethin.net/links.cfm>  
*********************************************************** 
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link: 
http://thethin.net/citrixlist.cfm <http://thethin.net/citrixlist.cfm>  

Other related posts: