[THIN] Re: Server Lockdown App?
- From: "Jim Kenzig ThinHelp.com" <jkenzig@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Tue, 19 Dec 2006 20:18:49 -0500
On my own PC it doesnt work at all published as an app but might with a
desktop.
On 12/19/06, M <mathras@xxxxxxxxxxxxxxxx> wrote:
Thanks for the info Jim,
Did you try this on PCs or in your Citrix environment ?
----- Original Message -----
*From:* Jim Kenzig ThinHelp.com <jkenzig@xxxxxxxxx>
*To:* thin@xxxxxxxxxxxxx
*Sent:* Wednesday, December 20, 2006 1:01 AM
*Subject:* [THIN] Re: Server Lockdown App?
SVS just runs the app in a separate space, so if you have plugins
associated with it they should also be loaded in that environment. I did it
with IE and use it all the time on PC for safe browsing. Here is a link to
blog I wrote on how I did it.
http://kenzig.blogspot.com/2006/09/tipidea-make-virtual-internet-explorer.html
Jim
On 12/19/06, M <mathras@xxxxxxxxxxxxxxxx> wrote:
>
> How are IE plugins handled by these virtualised solutions ?
>
>
> ----- Original Message -----
> *From:* Jim Kenzig ThinHelp.com <jkenzig@xxxxxxxxx>
> *To:* thin@xxxxxxxxxxxxx
> *Sent:* Tuesday, December 19, 2006 6:53 PM
> *Subject:* [THIN] Re: Server Lockdown App?
>
>
> You could also do it with Altiris SVS if you are going that route.
> JK
>
>
> On 12/19/06, Tant, Brian <Brian_Tant@xxxxxxxxxxxxx > wrote:
> >
> > Hahaha!! Oh sure we have one, but having one and trying to enforce
> > it are two different things. Especially across ~2000 or so field sites
> > where the person in question is the person who is charged with enforcing HR
> > policies. I might as well write up my own traffic tickets for people that
> > cut me off in traffic. Nah. I gotta have something solid. :-)
> >
> > I think I'm leaning on using a thinstall version of a browser and
> > locking it off from the OS file and registry services. Just in the
> > preliminary testing, it looks pretty good.
> >
> > Thanks for all the suggestions everyone!
> >
> > -Brian
> >
> > ------------------------------
> > *From:* thin-bounce@xxxxxxxxxxxxx [mailto: thin-bounce@xxxxxxxxxxxxx]
> > *On Behalf Of *Angus Macdonald
> > *Sent:* Tuesday, December 19, 2006 5:44 AM
> > *To:* thin@xxxxxxxxxxxxx
> > *Subject:* [THIN] Re: Server Lockdown App?
> >
> >
> > How about just waving the acceptable use policy (you DO have one,
> > don't you) until they stop causing trouble.
> >
> > -----Original Message-----
> > *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]*On
> > Behalf Of *Tant, Brian
> > *Sent:* 18 December 2006 18:39
> > *To:* thin@xxxxxxxxxxxxx
> > *Subject:* [THIN] Server Lockdown App?
> >
> > Hey Guys,
> >
> >
> >
> > I'm going to soon have several users accessing the Internet on my
> > servers, and while we do lock down the servers with GPOs and NTFS
> > permissions, I'm confident that they will manage to circumvent those
> > measures to some degree and cause issues. Does anyone have any suggestions
> > for thirdparty apps that might help lock these servers down to the hilt and
> > / or mitigate malware.
> >
> >
> >
> >
> >
> > Thanks,
> >
> > -Brian
> >
> >
> >
> > Brian Tant
> >
> > Lead Systems Engineer
> >
> > The Home Depot, Inc
> >
> > 770.433.8211 x11912
> >
> >
> >
> >
>
>
> --
> Jim Kenzig
> Microsoft MVP - Terminal Services
> http://www.thinhelp.com
> Citrix Technology Professional
> Provision Networks VIP
> CEO The Kenzig Group
> http://www.kenzig.com
> Blog: http://www.techblink.com
>
>
--
Jim Kenzig
Microsoft MVP - Terminal Services
http://www.thinhelp.com
Citrix Technology Professional
Provision Networks VIP
CEO The Kenzig Group
http://www.kenzig.com
Blog: http://www.techblink.com
--
Jim Kenzig
Microsoft MVP - Terminal Services
http://www.thinhelp.com
Citrix Technology Professional
Provision Networks VIP
CEO The Kenzig Group
http://www.kenzig.com
Blog: http://www.techblink.com
- References:
- [THIN] Re: Server Lockdown App?
- From: Angus Macdonald
- [THIN] Re: Server Lockdown App?
- From: Tant, Brian
- [THIN] Re: Server Lockdown App?
- From: Jim Kenzig ThinHelp.com
- [THIN] Re: Server Lockdown App?
- From: M
- [THIN] Re: Server Lockdown App?
- From: Jim Kenzig ThinHelp.com
- [THIN] Re: Server Lockdown App?
- From: M
Other related posts:
- » [THIN] Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
- » [THIN] Re: Server Lockdown App?
Thanks for the info Jim, Did you try this on PCs or in your Citrix environment ? ----- Original Message ----- *From:* Jim Kenzig ThinHelp.com <jkenzig@xxxxxxxxx> *To:* thin@xxxxxxxxxxxxx *Sent:* Wednesday, December 20, 2006 1:01 AM *Subject:* [THIN] Re: Server Lockdown App? SVS just runs the app in a separate space, so if you have plugins associated with it they should also be loaded in that environment. I did it with IE and use it all the time on PC for safe browsing. Here is a link to blog I wrote on how I did it. http://kenzig.blogspot.com/2006/09/tipidea-make-virtual-internet-explorer.html Jim On 12/19/06, M <mathras@xxxxxxxxxxxxxxxx> wrote: > > How are IE plugins handled by these virtualised solutions ? > > > ----- Original Message ----- > *From:* Jim Kenzig ThinHelp.com <jkenzig@xxxxxxxxx> > *To:* thin@xxxxxxxxxxxxx > *Sent:* Tuesday, December 19, 2006 6:53 PM > *Subject:* [THIN] Re: Server Lockdown App? > > > You could also do it with Altiris SVS if you are going that route. > JK > > > On 12/19/06, Tant, Brian <Brian_Tant@xxxxxxxxxxxxx > wrote: > > > > Hahaha!! Oh sure we have one, but having one and trying to enforce > > it are two different things. Especially across ~2000 or so field sites > > where the person in question is the person who is charged with enforcing HR > > policies. I might as well write up my own traffic tickets for people that > > cut me off in traffic. Nah. I gotta have something solid. :-) > > > > I think I'm leaning on using a thinstall version of a browser and > > locking it off from the OS file and registry services. Just in the > > preliminary testing, it looks pretty good. > > > > Thanks for all the suggestions everyone! > > > > -Brian > > > > ------------------------------ > > *From:* thin-bounce@xxxxxxxxxxxxx [mailto: thin-bounce@xxxxxxxxxxxxx] > > *On Behalf Of *Angus Macdonald > > *Sent:* Tuesday, December 19, 2006 5:44 AM > > *To:* thin@xxxxxxxxxxxxx > > *Subject:* [THIN] Re: Server Lockdown App? > > > > > > How about just waving the acceptable use policy (you DO have one, > > don't you) until they stop causing trouble. > > > > -----Original Message----- > > *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]*On > > Behalf Of *Tant, Brian > > *Sent:* 18 December 2006 18:39 > > *To:* thin@xxxxxxxxxxxxx > > *Subject:* [THIN] Server Lockdown App? > > > > Hey Guys, > > > > > > > > I'm going to soon have several users accessing the Internet on my > > servers, and while we do lock down the servers with GPOs and NTFS > > permissions, I'm confident that they will manage to circumvent those > > measures to some degree and cause issues. Does anyone have any suggestions > > for thirdparty apps that might help lock these servers down to the hilt and > > / or mitigate malware. > > > > > > > > > > > > Thanks, > > > > -Brian > > > > > > > > Brian Tant > > > > Lead Systems Engineer > > > > The Home Depot, Inc > > > > 770.433.8211 x11912 > > > > > > > > > > > -- > Jim Kenzig > Microsoft MVP - Terminal Services > http://www.thinhelp.com > Citrix Technology Professional > Provision Networks VIP > CEO The Kenzig Group > http://www.kenzig.com > Blog: http://www.techblink.com > > -- Jim Kenzig Microsoft MVP - Terminal Services http://www.thinhelp.com Citrix Technology Professional Provision Networks VIP CEO The Kenzig Group http://www.kenzig.com Blog: http://www.techblink.com
- [THIN] Re: Server Lockdown App?
- From: Angus Macdonald
- [THIN] Re: Server Lockdown App?
- From: Tant, Brian
- [THIN] Re: Server Lockdown App?
- From: Jim Kenzig ThinHelp.com
- [THIN] Re: Server Lockdown App?
- From: M
- [THIN] Re: Server Lockdown App?
- From: Jim Kenzig ThinHelp.com
- [THIN] Re: Server Lockdown App?
- From: M