Andy, Yes, I agree that to create a fully locked down environment then you would want to secure the USB ports too but that sort of reminds me of the C2 security lockdown feature of NT 3.51. I mean, to be totally secure unplug the cable. :-) So, I agree with you that you should lockdown the USB drives and prevent Active X and, bla, bla, bla but the fact of the matter is that we can't unplug the cable and if we are to compute then we need to open some things, i.e. USB... All in all, I'm VERY impressed with the Thinstall product as it overcomes a lot of the problems we have deploying clients. Of course not all of them... but it is a start. If you wanted you could always use something like RES PowerFuse 2005 to allow users to use their USB drives but for the use to be secure, one way traffic. But, that is an additional expense too, although very worth it but that is a different story. I don't know what to say... Also, unless I'm mistaken too, you still need admin or power user rights to install the Citrix client. Oh, I must say, one of the other issues that I'm very passionate about it the fact that with a client like this, as with SoftGrid apps, there is no need to install the app. Why is this important? Because it does not alter the base OS and in Govt and very secure environments this is a must! So, again, I agree with you that there are still security issues, but not as bad... I mean, with this client I can close off a lot of Internet security problems but of course I do still have a problem with the end-user causing issues. Although, I trust my end-users a lot more than I trust the Internet, so that is cool with me. All in all, I like this client and Thinstall just fixed a few bugs that a few of us have complained about. Now it works seamlessly with WI. I'm updating my "how to" article right now so that will be posted in the AM: http://www.dabcc.com/dabcc/webapplication/aspx/dabcc.content.aspx?intPKT ext=1612&intPKChannel=13 OK, that is my two cents... I'm curious what everyone thinks? Take care all, DB Douglas A. Brown President and Chief Technology Officer Microsoft MVP, Windows Server DABCC, Inc. Phone: 941.922.0454 Fax: 941.827.9073 E-mail: dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> Web: http://www.dabcc.com <http://www.dabcc.com/> ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Sent: Thursday, March 23, 2006 8:32 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: ThinStall?? Been looking at the demo and marketing on thinstall's website. They say With locked down computers, people are unable to run ActiveX and Java. And without Admin rights end users are stuck. I run an environment that secures end user public devices. Do they really think I would disable ActiveX but leave USB ports open ! I mean come on.... Am I missing the point here ? Also in the past I thought that admin rights were not needed to install the citrix client. OK last time i tested was on NT4 with client version 7... On 3/22/06, Douglas A. Brown <dbrown@xxxxxxxxx> wrote: Yes, it is cool as it is truly virtualized and their solutions are portable, compressed and it does not require a client to be installed. It also adds VERY little overhead to they system. All in all, it is sort of amazing stuff... Very impressive. DB Douglas A. Brown President and Chief Technology Officer Microsoft MVP, Windows Server DABCC, Inc. Phone: 941.922.0454 Fax: 941.827.9073 E-mail: dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> Web: http://www.dabcc.com <http://www.dabcc.com/> ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Joe Shonk Sent: Tuesday, March 21, 2006 11:53 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: ThinStall?? Actually, I think Steve was asking more about the underlining technology. It closely resembles Softgrid. And no client is needed. Joe On 3/21/06, Douglas A. Brown < dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> > wrote: Oh Steve.... Always check DABCC.com.... herheheehehe http://www.dabcc.com/dabcc/webapplication/aspx/dabcc.content.aspx?intPKT ext=1612&intPKChannel=13 And there is more... 1) it works with the PN.EXE which does not work through CSG, unless you are in relay mode... 2) it works with the ActiveX client but that does not support seamless windows (please someone prove me wrong on that) the rest of the "how to" is in the article. I'm going to be talking to one of their engineers later this week so if anyone has any questions then let me know and I will ask and then let you all know the answers. All in all, this could be a killer client but right now there are a few drawbacks. That is what I know. I've played with it a lot!!! :-) DB Douglas A. Brown President and Chief Technology Officer Microsoft MVP, Windows Server DABCC, Inc. Phone: 941.922.0454 Fax: 941.827.9073 E-mail: dbrown@xxxxxxxxx <mailto:dbrown@xxxxxxxxx> Web: http://www.dabcc.com <http://www.dabcc.com/> ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto: thin-bounce@xxxxxxxxxxxxx <mailto:thin-bounce@xxxxxxxxxxxxx> ] On Behalf Of Steve Greenberg Sent: Tuesday, March 21, 2006 11:53 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] ThinStall?? Does anyone one have any experiences with ThinStall? http://www.thinstall.com <http://www.thinstall.com/> Thanks Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net <http://www.thinclient.net/> steveg@xxxxxxxxxxxxxx