General discussion

  • Creator
    Topic
  • #2315736

    Network security

    Locked

    by spouye ·

    Hi there:

    Does anyone know how to block almost everything on a pc that runs Win 98 or 2000. My users have operator privileges, however they can still access things like: clear their history, delete or rename icons on their desktop, etc… I would like to block all those: cannot open my computer, start-run disable that also, basically block everything!!!

    I appreciate it you all!!!

All Comments

  • Author
    Replies
    • #2745232

      Policies

      by jpcandiff ·

      In reply to Network security

      User and Machine policies in Novell can restrict most of that.

      • #2745202

        Reply To: Network security

        by spouye ·

        In reply to Policies

        I am in Windows environment. What do think?

        Thanks!!!

        • #2745181

          Reply To: Network security

          by jpcandiff ·

          In reply to Reply To: Network security

          I suggest a firewall (Cisco and Checkpoint are your best bet). Firewall software has tons of built in logging capabilities. You can configure it to send you an email when users go to sites with certain content, log all internet activity by hits or user, and block specific sites. As far as email goes, all external email can be monitored with firewall software(as well as ANY other data that leaves your LAN). I dont know what type of mail server your using, but im sure it has monitoring capabilities. If not, look into a program called Unicenter(you can probably find more info at http://www.ca.com). Unicenter gathers network info and generates reports, logs, and notifications.

    • #2747195

      MMC

      by dr_ice_4eva ·

      In reply to Network security

      Did you try playing around with the security settings in MMC. Because it should allow you to block specific things on teh user(s).

      • #2592858

        Not a Reply but a call for help

        by deanritch2 ·

        In reply to MMC

        I am helping AARP members who have new Vista; I am not a good tech. Two have told me that they get messages saying that they can’t open many of the items in the control panel because of some security issues; they may or may not have selected system administrators; how do I tell them to see if they are being blocked because they do not have proper authority (pass word, etc.) to give the system permission to enter the program. Sorry to bother you folks with such a simple problem, but I do enjoy trying to help but it seems I need more help than them. Is this a Vista problem or an MMS problem?

    • #2747157

      There is a solution

      by zar ·

      In reply to Network security

      It’s been a while since I used it but poledit it’s a utility provoded by whindows that will allow you to do all of the things you don’t wan’t them to do.
      For windows 2K i’m sure there is something similar but my users are not that big of a pain so they dont erase anything (lucky me).
      Yet I think that the best solution for you is ti implemente and enforce a computer susage and security policiy have everyone who touches a computer readed and sing it.
      I recall havina a security notice on one of my windows 9x boxes everytime someone logged on it would display the notice. Later if someone misused the equipment I could nail that person.
      Befoire you sepend money and start restrictin (limiting resources) because of ill users educate and disicpline them.

    • #2747128

      Dream – but don’t dream too much!

      by voldar ·

      In reply to Network security

      What you are asking here means a lot of work from your part – and the way you put this “post” – makes me think (oops – I think!! 🙂 – with my only single neuron) that you really have to work hard! Why?! Let me tell you one reason:
      – W9x and W2K are not based on the same technology – so, what’s good for W2K (policies i.e.) is not good for W9x.
      – If you want to implement such restritive rules – why don’t you simply close the computers and mark them: – DON’T TOUCH ? Or better – switch to linux – text mode – so that users will not “kill” anything on their desktops :))

      Yes, what you ask for can be done – easiest way if you have all machines with W2K/XP. And also there are some other demands such as: W2K network environment, Active Directory implemented etc. My advise is start learning/trying/implement so that you accomplish what you want. Nobody here, I presume can give you a detailed answer showing how to do things step-by-step.

Viewing 3 reply threads