Get a firewall that works as "Deny all" unless you specifically let them through, instead of "Allow all" except what you block... Symantec Enterprise Firewall (Formerly Eagle Raptor) is an excellent example of this... -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] Sent: Thursday, May 27, 2004 9:17 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Messenger Service >Well, for one, you could/should not let people browse the Internet in TS sessions (assuming that >they use normal desktops regularly). Also, don't you have AV software running on your TS >server?! Another thing is that you can prevent users from downloading files in IE by disabling >the option in the security settings for the zone and taking away their rights to change that. > >Ray at work They do not have regular desktops. All my users connect to a terminal server via a thin client terminal. They get a full desktop with minimal icons, and then the citrix pnagent populates their icons and start menu based on their group membership. Every time I ratchet down the settings, things people need to work stop working. We're in healthcare and there are a ton of state and federal agencies we have to interact with on their websites. Various reports and billing things have to be uploaded and downloaded and we can't live without it. If there is a way to blend it where all that stuff is denied except where we need it, I'm all for it. Greg ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm