Security

Ask something
Discussion Locked

Security for a commonly used computer

0 helpful
6 replies

by peter_hoffman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hello everyone ! I have a network with about 35 computers, three of these are available to more than one user with the same logon. What type of security policy works best in this situation ?

6 replies

by timwalsh

(This is really getting to be my favorite answer).

What are your goals for these computers? What are your security requirements for these computers?

What operating system do these computers use? Are these computers connected to a domain, or only a workgroup?

What type of policy you need to implement will be determined by the answers to the first 2 questions.

How best to implement the policy is determined in part by the answers to the second 2 questions.

The bottom line is that there is no single policy that will work for similar situations across all organizations.

by peter_hoffman

Thanks for your input

My goal is to make sure the users have access to their network share and monitored access to the Internet. I am running SBS 4.5 in a domain with proxy server, they cannot use the Internet unless they authenticate to theserver. The Workstations are Win98, hopefully in a month or so we will be upgrading to winXp. At this point, I can restrict their access to network resources and the Internet. Also I do not have enough cals to give each one of my users a separate logon.

Looking for suggestions Thanks

by mcarlsonus

My first reaction was, "I sure hope those passwords include upper and lower case and symbols as well as letters!" My other thought was what is the intended use for the 3 accessible to everyone? Are these used to go online and, if so, is the rest of the network exposed because of these three? What about routers? Any firewalls? Any way of detecting/deflecting intrusion attempts, viruses, trojans, etc.? My first thought would be you should minimize your overall exposure by using a VPN ("virtual private network") setup. I don't usually do commercial endorsements, but with a network of 35 total, I don't feel it'd be a bad idea to ask for some help and advice from someone like Symantec who does both enterprise and personal computer security and has recently updated their intrusion detection services.

by peter_hoffman

Thanks for your input

My goal is to make sure the users have access to their network share and monitored access to the Internet. I am running SBS 4.5 in a domain with proxy server, they cannot use the Internet unless they authenticate to the server. The Workstations are Win98, hopefully in a month or so we will be upgrading to winXp. At this point, I can restrict their access to network resources and the Internet. At the moment I do not have enough cals to give each one of my users a separate logon.

I do have a firewall from Cisco, which is a gift from heaven! However, these users are internal.

Not really sure if there is much more I can do!

Looking for your input Thanks

by mcarlsonus

There's probably no sense in attempting anything as long as the workstations are still on W98. XP would, indeed, be the place to start exploring making yourself more invulnerable.
What Cisco router? You have firewall, stateful packet inspection enabled, etc?

by deadly ernest

A big tough (like Arnie) with a .45 cal magnum standing over them to ensure that they don't access the wrong areas.

This discussion is closed to new replies.