Re: Is it possible to "disable" Internet Explorer in this case?

From: Karl Levinson, mvp (levinson_k_at_despammed.com)
Date: 12/19/04


Date: Sun, 19 Dec 2004 01:53:17 -0500

1) Consider using IPsec filters to block access to TCP 80, 81, 443, 8080,
and any other port often used by him. Monitor to see whether he starts
using other ports.

http://securityadmin.info/faq.asp#ipsec

2) use router ACLs, proxy server and/or firewall to prevent Internet access
to those ports for his login ID [if a proxy server is being used] and/or
computer's IP address. Even inexpensive firewalls like www.netscreen.com
should come with the ability of per-user authentication for Internet access
for around $600 US.

"Ralph" <daytonohio10@sbcglobal.net> wrote in message
news:1103396055.183239.306830@c13g2000cwb.googlegroups.com...
> Is it possible to "disable" Internet Explorer in this case?
>
>
> I run a franchise-like business. I am an independent contractor, and I
> have three employees. I sell services for a major national company.
> In order to maintain quality control and security, the company I work
> for provides the PC's, the software, and the internet access to do
> our work. We use Windows 2000 OS, Microsoft Office, and Internet
> Explorer.
>
> In order to quality control and security of the PC's, we cannot load
> or delete any software from the PC's. In fact, there is no Add/
> Remove Programs option in the control panel. It's been removed.
>
> Here's my problem: I have an employee who simply cannot stay off the
> internet during work. I have done all the routine actions required by
> an employer: I have talked to him, provided written company policy,
> written office policy, given a written reprimand, and talked to him
> again and again.
>
> About a year ago, I even wrote an agreement that if he surfed the
> internet during work hours, I could deduct $20 per website. He agreed
> to it and he signed it. But he continues to surf when I am not in the
> office. I did not have the heart to enforce it. I don't want to
> withhold his money. I want his full attention to give 100% excellent
> customer service! That's what my customers deserve! And he is not
> getting all his work done. I am noticing an increase in errors and his
> customer service has suffered.
>
> He has been with me three years, and is important to my business, so I
> have not fired him (but I am getting really close). I am seeking a
> better "win-win" solution.
>
> Months ago I contacted our corporate office and asked, "can I please
> have IE removed from one PC?". They said no. They simply don't
> want to do it.
> I don't fully understand why. My guess is that since they are
> responsible for thousands of PC's in the US (configured just like
> mine), I think they don't want to be bothered with an individual
> request to customize a PC. It might create a precedent that could
> create more work for them, and more headaches. From their perspective,
> I guess that makes sense.
>
> I spoke to my employee last week about the continued problem, and he
> admitted that he is basically addicted to the internet. (His main
> passion is cars - not porn or gambling. He just loves cars. And
> Ebay.). I told that I had inquired about removing IE from his PC. He
> said he would be in favor of that and that he thought it would be a
> good idea.
> Most of his work does not require internet access. And every PC in my
> office has IE and broadband access, so it's available elsewhere when
> needed to do his work. And there are other PC's with IE that are
> readily available for use.
>
> Again, yes I could easily fire him. I have volumes of documentation.
> I have even found one instance where what he was viewing was adult
> oriented, is NOT family friendly or workplace safe. But he wants me to
> work with him and I am trying to find a creative solution (yes, I have
> fired people before. Firing people, IMO, is a last resort and not very
> creative).
>
> Here's where I am seeking help: can you suggest a way that I can go
> to his PC and disable IE? Remember, I can't add or remove any
> programs, and I don't own the PC. And, since I don't have the
> company blessing, I don't want to create any technical problems that
> would impede any other operation of the PC. I am fairly PC literate.
>
> If I can disable IE, I will explain it to him before I do it.
>
> Can you give me a suggestion to disable IE? I have run out of ideas.
> Got any ideas for me?
> If you think there is a more appropriate forum for this question, pls
> let me know. (sorry to write so much....just trying to anticipate
> questions).
>
> Thanks.
>
> Ralph
>



Relevant Pages

  • Re: Is it possible to "disable" Internet Explorer in this case?
    ... We use Windows 2000 OS, Microsoft Office, and Internet ... I have an employee who simply cannot stay off the ... > customer service has suffered. ... > Most of his work does not require internet access. ...
    (microsoft.public.security)
  • RE: List of ports that are in use
    ... these ports should be opened for internet access. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: A BT1800 ADSL router and a Netgear Switch nightmare!
    ... Is it possible to plug the Switch into one of the ports of the ADSL ... modem/router and maintain a network Workgroup AND shared Internet access, ... an IP address and DNS for each machine. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Tool to find hidden web proxy server
    ... > This problem is strictly with in company internet access firewall and in the ... policy for Internet access says it is through IP ... > default ports and distributed the internet access to their friends. ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (Pen-Test)
  • T-Mobile - Free GPRS?
    ... Internet access for ports 80, 25 and 113, only. ... that you can send & retrieve POP email, and surf unsecured web pages. ... Is this a matter of policy, or an oversight on T-Mobile's part? ...
    (microsoft.public.pocketpc)

Quantcast