Home › Forums › Client Operating Systems › Windows 2000 Pro, XP Pro › explain to me how to make XP workstation secure from staff installing software? › Re: explain to me how to make XP workstation secure from staff installing software?
Re: explain to me how to make XP workstation secure from staff installing software?
This is especially an issue where users have previously been allowed to do whatever they like. Telling them actually, no you can’t do that, always leads to issues. A security policy is of little use if it is not adhered to and enforced.
True, you will never stop determind users… Same as you will never stop a hacker, does that mean you do not try?
Do you have a firewall, how about AV? Its the same as user restictions.
You can block access to all know proxy websites via most net nanny type software.
You can restrict access to IE options, then set proxy servers via GPO to a monitored proxy server.
You can remove access to the C drive completely, then only give the staff a Network share that can not run exeicutables.
Its honistly amazed me that IT admins are say that you cant stop people installing software on a windows XP machine. I really hope this is a joke that I am not getting the punchline of.
Lets fire all the police officers and just let the lawers deal with everyone …. (basiclly what you are saying to do).
The only policy you need is a policy to fire someone if found trying to by-pass secruity. Its like a fence, you put it there, tell everyone to stay inside, or they will be fired. Put not putting a fence up, and then telling everyone they will be fired if they leave that area is alittle silly.
http://lmgtfy.com/?q=User+restrictions+using+GPO (the first 3 results will answer different parts of your question)
PS: I would like to hear the converstation with you CEO when you told him you can not lock down a workstation. Must have a tounge of gold if you where not fired on the spot.