[windows2000] Re: Messenger Service

  • From: Jeff Malczewski <jmalczewski@xxxxxxxx>
  • To: "'windows2000@xxxxxxxxxxxxx'" <windows2000@xxxxxxxxxxxxx>
  • Date: Thu, 27 May 2004 11:40:19 -0400

Get a firewall that works as "Deny all" unless you specifically let them
through, instead of "Allow all" except what you block...


Symantec Enterprise Firewall (Formerly Eagle Raptor) is an excellent example
of this...



-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx]
Sent: Thursday, May 27, 2004 9:17 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Messenger Service


 

>Well, for one, you could/should not let people browse the Internet in
TS sessions (assuming that >they use normal desktops regularly).  Also,
don't you have AV software running on your TS >server?!  Another thing
is that you can prevent users from downloading files in IE by disabling
>the option in the security settings for the zone and taking away their
rights to change that.
>
>Ray at work

They do not have regular desktops.  All my users connect to a terminal
server via a thin client terminal.  They get a full desktop with minimal
icons, and then the citrix pnagent populates their icons and start menu
based on their group membership.

Every time I ratchet down the settings, things people need to work stop
working.  We're in healthcare and there are a ton of state and federal
agencies we have to interact with on their websites.  Various reports
and billing things have to be uploaded and downloaded and we can't live
without it.  If there is a way to blend it where all that stuff is
denied except where we need it, I'm all for it.

Greg

********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail.
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: