Re: Blocking Access to web-based email

From: Frankster (Frank_at_SPAM2TRASH.com)
Date: 08/14/05

  • Next message: Billy Smith: "Re: Zone Alarm Security Suite 6 problems...and questions" 
    Date: Sat, 13 Aug 2005 21:31:02 -0600

    >>All this "locking down" we often hear about is sometimes a case of the
    >>cure being worse than the disease. You must *think* about the consequences
    >>of your actions. Meaning, the admin must weigh the threat/risk against
    >>the level of effort to enforce.
    >
    > How often is it "your" decision? You really should be following company
    > policy, rather than policing on your own.

    As an admin, and finally, a manager of System Engineers, I have almost
    always been involved in setting, writing and/or changing policy. That is,
    IMHO, part of every admins job. By that I mean, I believe it is the job of
    every admin not only to find smart solutions that support company policies,
    but to improve them and be able to "pitch" them to management and win their
    case.

    -Frank

  • Next message: Billy Smith: "Re: Zone Alarm Security Suite 6 problems...and questions"

    Relevant Pages

    • Re: Blocking Access to web-based email
      ... rather than policing on your own. ... writing and/or changing policy. ... >every admin not only to find smart solutions that support company policies, ... there are various labor laws ...
      (comp.security.firewalls)
    • Re: How to make regular user a default admin for Computers underhisOU ?
      ... I redid the OU and groups from scratch and applied the "restriced groups" policy. ... And once they create and join their computers, they can do all the admin tasks fine. ... For changing the workstation name, for example, you must have domain admin rights or the group has to get delegated the right to change a workstation name, because it is a domain member. ... login as one of them I cannot do any Admin related tasks. ...
      (microsoft.public.windows.server.active_directory)
    • Re: BITS 2.0 Install Fails - Permission problem
      ... It sounds as though a domain policy is set that trumps your local policy. ... don't think that even a domain admin can override it by editing the local ... > And I get the same problem: Error Code: 8007F004 when installing the BITS ... >> Please verify that your account has the following required permissions. ...
      (microsoft.public.windowsupdate)
    • Re: Securing Enterprise Policy from local admins
      ... Admin is admin. ... but it is just the fact that a local admin on the box ... >>Enterprise Policy Administration ...
      (microsoft.public.dotnet.security)
    • Re: Securing Enterprise Policy from local admins
      ... > Admin is admin. ... >> All the .NET Framework security policy docs on the website speak to the ... >> has full control of the security settings through the machine policy. ... >> enterprise policy is intended to be managed at the enterprise and is why ...
      (microsoft.public.dotnet.security)
    • Quantcast