Re: explain to me how to make XP workstation secure from staff installing software?

Home Forums Client Operating Systems Windows 2000 Pro, XP Pro explain to me how to make XP workstation secure from staff installing software? Re: explain to me how to make XP workstation secure from staff installing software?


Anonymous
#370903

Re: explain to me how to make XP workstation secure from staff installing software?

cruachan;217499 wrote:
Determined users will find ways around things, a notable example is proxy bypass websites which users will use to access social networking websites. If there are no policies and procedures in place then IT can do nothing, as it is a management responsibility to deal with user’s behaviour.

This is especially an issue where users have previously been allowed to do whatever they like. Telling them actually, no you can’t do that, always leads to issues. A security policy is of little use if it is not adhered to and enforced.

True, you will never stop determind users… Same as you will never stop a hacker, does that mean you do not try?

Do you have a firewall, how about AV? Its the same as user restictions.

You can block access to all know proxy websites via most net nanny type software.
You can restrict access to IE options, then set proxy servers via GPO to a monitored proxy server.

You can remove access to the C drive completely, then only give the staff a Network share that can not run exeicutables.

Its honistly amazed me that IT admins are say that you cant stop people installing software on a windows XP machine. I really hope this is a joke that I am not getting the punchline of.

Lets fire all the police officers and just let the lawers deal with everyone …. (basiclly what you are saying to do).

The only policy you need is a policy to fire someone if found trying to by-pass secruity. Its like a fence, you put it there, tell everyone to stay inside, or they will be fired. Put not putting a fence up, and then telling everyone they will be fired if they leave that area is alittle silly.

http://lmgtfy.com/?q=User+restrictions+using+GPO (the first 3 results will answer different parts of your question)

Wofen

PS: I would like to hear the converstation with you CEO when you told him you can not lock down a workstation. Must have a tounge of gold if you where not fired on the spot.