Hi Angus, Please provide a sample ini. I'd love to have a play when time allows. Cheers, Jeremy. "Angus Macdonald" <Angus.Macdonald@ nww-tr.wales.nhs. To uk> <thin@xxxxxxxxxxxxx> Sent by: cc thin-bounce@freel ists.org Subject [THIN] Re: Best way of locking down a standard machine for use as a 15/05/2007 11:41 thinclient PM Please respond to thin@xxxxxxxxxxxx g I've posted the most recent version to http://www.digiwake.co.uk/zipfiles/Shelaunch21c.rar (case-sensitive) in case anyone wants to try it out. I can provide sample .ini files for our installation as well if required. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Angus Macdonald Sent: 15 May 2007 16:09 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Best way of locking down a standard machine for use as a thinclient We run it on XP nowadays as as well. As long as the default user isn't a local admin it should be secure enough for most purposes. An enthusiastic hacker would probably be able to break it but he could probably break anything. Our terminals aren't domain members (as they only need TV access) and are set to autologin as a local user with very limited permissions. We've assigned a hotkey to switch the shell back to normal explorer mode (Shelaunch.exe /X) but since it involves writing to HKLM the default user can't do it. It's been secure enough for us. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Sean Lewis Sent: 15 May 2007 15:56 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Best way of locking down a standard machine for use as a thinclient Angus, that's pretty awesome mate but I'm more looking for something XP Pro based which is the platform we work with. I haven't touched those old win systems for about 5 years O_O Thanks Sean -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Angus Macdonald Sent: 15 May 2007 15:21 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Best way of locking down a standard machine for use as a thinclient It's not 100% secure from tampering but if you Google for "shelaunch" you'll come across a replacement Windows shell I developed. We use it extensively on single-use machines and it was designed with Citrix/TS specifically in mind. Angus -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Sean Lewis Sent: 15 May 2007 15:04 To: thin@xxxxxxxxxxxxx Subject: [THIN] Best way of locking down a standard machine for use as a thinclient Hi, I need pointing in the direction of a resource that can help me secure a standard windows box for use as a thin client connecting via mstsc to a MS 2K3 TS over a persistent VPN. I'm looking for a way of making the box startup and automagically launch the mstsc client and not allow users to play outside that environment. Cheers for any input. Sean Visit our web site: www.besconsulting.co.uk BES Consulting Ltd (UK Head Office) TEL: 01484 545533, FAX: 01484 545577 Offices also at: Belfast, Edinburgh, Cardiff, Birmingham and London SAFEGUARDING AGAINST RISK! - DO YOU NEED ADVICE ON THE NEW ASBESTOS REGULATIONS 2006 OR THE NEW FIRE REGULATIONS 2006 OR LEGIONELLA REGULATIONS? CALL US ON 01484 545533 AND ASK TO SPEAK TO THE BUSINESS DEVELOPMENT TEAM OR EMAIL info@xxxxxxxxxxxxxxxxxxx ____________________________________________________________________________ ____________________________________________ This e-mail and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication is legally binding. Please see our web site, www.besconsulting.co.uk for Terms and Conditions. BES Consulting Ltd. are registered in England with the Company Registration Number 3422181 and VAT Registration Number 860 1809 33 SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ Visit our web site: www.besconsulting.co.uk BES Consulting Ltd (UK Head Office) TEL: 01484 545533, FAX: 01484 545577 Offices also at: Belfast, Edinburgh, Cardiff, Birmingham and London SAFEGUARDING AGAINST RISK! - DO YOU NEED ADVICE ON THE NEW ASBESTOS REGULATIONS 2006 OR THE NEW FIRE REGULATIONS 2006 OR LEGIONELLA REGULATIONS? CALL US ON 01484 545533 AND ASK TO SPEAK TO THE BUSINESS DEVELOPMENT TEAM OR EMAIL info@xxxxxxxxxxxxxxxxxxx ________________________________________________________________________________________________________________________ This e-mail and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication is legally binding. Please see our web site, www.besconsulting.co.uk for Terms and Conditions. BES Consulting Ltd. are registered in England with the Company Registration Number 3422181 and VAT Registration Number 860 1809 33 SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************