It's not the first time the word "mentality" has been mentioned in the same breath as my name! ;-) And a hearty, resounding affirmation to your last paragraph - as you say, may take more time to get right - but worth it in the end. Neil > -----Original Message----- > From: Paul DeHaan [mailto:wppad@xxxxxxxxx] > Sent: 16 December 2003 15:19 > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Re: Yahoo messenger > > > You can use DumpACL to track down file/folder permissions. > It's a bit tedious... > > I've had the "Neil" mentality for some years now. For each > application that runs on my Citrix servers, I track down what > permissions are needed in the registry and file system to > make it run properly (sometimes difficult). After a fresh > server is installed (or base image applied), I follow my > procedures to reset the permissions on the file system and > registry. Then appsec is configured to allow only the > executables that I allow. This prevents the installation of > most apps. Only Intranet access is allowed on the servers, > and I ALWAYS reduce the default Everyone = Full Control to > Read which would prevent rough installations. In IE there > are also some settings to disallow running Unsigned ActiveX, etc... > > It takes more work to get a new app running properly, but the > servers stay stable, and downtime is minimal. It's worth > every bit of the extra time. > > Regards, > > Paul DeHaan CISSP, CCNA, CCA... > Network Administrator > J.M. Huber Corp. *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Week's Sponsor - 99Point9.Com Emergent Online EOL Universal Printer 4.0 Has arrived! http://www.99point9.com/public/products/ ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm