|
Posted by Frankster on January 5, 2006, 12:18 pm
If you were Registered and logged in, you could reply and use other advanced thread options Okay, I'm gonna type in caps, not because I'm yelling but because it is so
so important.
EVERY NETWORK MUST HAVE A --WRITTEN-- (and signed by the employee) SECURITY
POLICY AS TO WHAT IS ALLOWED AND DISALLOWED.
There are many approaches to network security, network use, and preventing
abuse. ONE is the written policy. ANOTHER is the technical enforcement of
that written policy WHEN POSSIBLE. If technical enforcement is not
possible, you enforce the WRITTEN POLICY of user CONDUCT (to which he as
agreed).
We trust employees with much more expensive things than using the messenger
service (usually). Let them take on this burden. They are paid to deal with
it. They can handle it. Or... they know the alternative (if you have a
written policy!).
-Frank
> Hi there,
>
> This may be too much of a simple question for this board (well I hope
> it is easy anyway) but at work we're looking at clamping down on our
> PC's and want the following:
>
> - Stop users using Messenger
> - Stop users installing programs themselves.
>
> In theory this does not sound hard, but here is the sticking point. We
> have to allow users admin privlidges of the computer (not network), due
> to an important program we use requires admin privlidges.
>
> Plus our active directory is upon a windows 2000 server, which means
> most of the good options which 2003 has we do not have (like disabling
> messenger)
>
> I have looked on the net, but probably missed all the good sites, but I
> was hoping to find a solution within Active directory, or maybe a
> script to stop it.
>
> The main reason to wanting to do it centrally is so that I do not have
> to go round to every PC and disable certain things.
>
> Incase it helps the platforms of the PC's are XP professional.
>
> Any help would be much appreciated.
>
> Many thanks
>
|