Re: Users "bypassing" Group Policy restrictions

From: matthew patton (pattonme_at_yahoo.com)
Date: 01/28/05

  • Next message: Ghetti, Tim: "RE: Domain logon without network connection + group policies" 
    Date: Thu, 27 Jan 2005 16:22:32 -0800 (PST)
To: focus-ms@securityfocus.com

    While I likewise agree you've got some rather creative users on your
    hands the fact that they went to such lengths to circumvent your
    automatic policies should scream in flashing, bold letters there is
    something wrong with the relationship between IT and the users. Instead
    of trying to force them into compliance, have you undertaken a frank
    and open interview with the users in question to determine why is it
    the policies you have or trying to put in place do not work? What
    application that they think they absolutely must have are you denying?
    What procedural routine (correct or otherwise) do your policies prevent
    and thus annoy the heck out of your users? Is it really and truly a
    case of they being mavericks and doing whatever they damn well please
    and IT can get stuffed? If the latter then compliance with IT practices
    could/should be a precondition of their continued employment. Or you
    could administratively disable their ethernet port at the switch. Or
    you could wash your hands of them and refuse to support their work. Or
    you could get the CIO/CTO to read them the riot act. But first look to
    see what your policies are doing that the users take such great
    exception to and examine whether a readjustment might be in order.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Ghetti, Tim: "RE: Domain logon without network connection + group policies"

    Relevant Pages

    • Re: New Xilinx forum.
      ... Xilinx has policies about employees communicating in any public forum ... compliance with Xilinx policies. ...
      (comp.arch.fpga)
    • Re: personal edition
      ... so I agree with Tom that it might be ... Not trying to circumvent their policies, ... However, if Borland notices registrations ...
      (borland.public.delphi.non-technical)