[THIN] Re: ThinStall??

  • From: "Douglas A. Brown" <dbrown@xxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 24 Mar 2006 00:30:40 -0500

Andy,

 

Yes, I agree that to create a fully locked down environment then you
would want to secure the USB ports too but that sort of reminds me of
the C2 security lockdown feature of NT 3.51.  I mean, to be totally
secure unplug the cable.  :-)   So, I agree with you that you should
lockdown the USB drives and prevent Active X and, bla, bla, bla but the
fact of the matter is that we can't unplug the cable and if we are to
compute then we need to open some things, i.e. USB...  All in all, I'm
VERY impressed with the Thinstall product as it overcomes a lot of the
problems we have deploying clients.  Of course not all of them... but it
is a start. 

 

If you wanted you could always use something like RES PowerFuse 2005 to
allow users to use their USB drives but for the use to be secure, one
way traffic.   But, that is an additional expense too, although very
worth it but that is a different story. I don't know what to say... 

 

Also, unless I'm mistaken too, you still need admin or power user rights
to install the Citrix client.  

 

Oh, I must say, one of the other issues that I'm very passionate about
it the fact that with a client like this, as with SoftGrid apps, there
is no need to install the app.  Why is this important?  Because it does
not alter the base OS and in Govt and very secure environments this is a
must! 

 

So, again, I agree with you that there are still security issues, but
not as bad... I mean, with this client I can close off a lot of Internet
security problems but of course I do still have a problem with the
end-user causing issues.  Although, I trust my end-users a lot more than
I trust the Internet, so that is cool with me.

All in all, I like this client and Thinstall just fixed a few bugs that
a few of us have complained about.  Now it works seamlessly with WI.
I'm updating my "how to" article right now so that will be posted in the
AM:
http://www.dabcc.com/dabcc/webapplication/aspx/dabcc.content.aspx?intPKT
ext=1612&intPKChannel=13

 

OK, that is my two cents... I'm curious what everyone thinks?   

 

 

Take care all, 

 

DB

 

 

Douglas A. Brown

President and Chief Technology Officer 

 

Microsoft MVP, Windows Server 

 

DABCC, Inc.

 

Phone:    941.922.0454

Fax:        941.827.9073

 

E-mail:    dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> 

Web:      http://www.dabcc.com <http://www.dabcc.com/> 

 

 

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Andy
Sent: Thursday, March 23, 2006 8:32 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ThinStall??

 

Been looking at the demo and marketing on thinstall's website.

 

They say

With locked down computers, people are unable to run ActiveX and Java.
And without Admin rights end users are stuck.

 

I run an environment that secures end user public devices. Do they
really think I would disable ActiveX but leave USB ports open ! I mean
come on.... Am I missing the point here ?

 

Also in the past I thought that admin rights were not needed to install
the citrix client. OK last time i tested was on NT4 with client version
7...

 

On 3/22/06, Douglas A. Brown <dbrown@xxxxxxxxx> wrote: 

Yes, it is cool as it is truly virtualized and their solutions are
portable, compressed and it does not require a client to be installed.
It also adds VERY little overhead to they system.   All in all, it is
sort of amazing stuff... Very impressive.   

 

DB

 

Douglas A. Brown

President and Chief Technology Officer 

 

Microsoft MVP, Windows Server 

 

DABCC, Inc.

 

Phone:    941.922.0454

Fax:        941.827.9073

 

E-mail:    dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> 

Web:       http://www.dabcc.com <http://www.dabcc.com/> 

 

 

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Joe Shonk


Sent: Tuesday, March 21, 2006 11:53 PM
To: thin@xxxxxxxxxxxxx

Subject: [THIN] Re: ThinStall?? 

 

Actually,  I think Steve was asking more about the underlining
technology.  It closely resembles Softgrid.  And no client is needed. 

Joe

On 3/21/06, Douglas A. Brown < dbrown@xxxxxxxxx
<mailto:dbrown@xxxxxxxxx> > wrote:

Oh Steve.... Always check DABCC.com.... herheheehehe

 

 

http://www.dabcc.com/dabcc/webapplication/aspx/dabcc.content.aspx?intPKT
ext=1612&intPKChannel=13

 

 

And there is more... 

 

1)        it works with the PN.EXE which does not work through CSG,
unless you are in relay mode...  

2)        it works with the ActiveX client but that does not support
seamless windows (please someone prove me wrong on that) 

 

 

the rest of the "how to" is in the article.   I'm going to be talking to
one of their engineers later this week so if anyone has any questions
then let me know and I will ask and then let you all know the answers.
All in all, this could be a killer client but right now there are a few
drawbacks. 

 

That is what I know.  I've played with it a lot!!!  :-) 

 

DB

 

Douglas A. Brown

President and Chief Technology Officer 

 

Microsoft MVP, Windows Server 

 

DABCC, Inc.

 

Phone:    941.922.0454

Fax:        941.827.9073

 

E-mail:    dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> 

Web:       http://www.dabcc.com <http://www.dabcc.com/> 

 

 

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto: thin-bounce@xxxxxxxxxxxxx
<mailto:thin-bounce@xxxxxxxxxxxxx> ] On Behalf Of Steve Greenberg
Sent: Tuesday, March 21, 2006 11:53 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] ThinStall??

 

Does anyone one have any experiences with ThinStall?

 

http://www.thinstall.com <http://www.thinstall.com/> 

 

 

Thanks

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262 

(602) 432-8649

www.thinclient.net <http://www.thinclient.net/> 

steveg@xxxxxxxxxxxxxx 

 

 

Other related posts: