Re: Installing Software without being Local Admin?
- From: "Ben" <benb@xxxxxxxxxxxxxxxx>
- Date: Wed, 25 Jul 2007 08:45:45 +0100
"Malke" <notreally@xxxxxxxxxxxxxxx> wrote in message
news:OpVCJvfzHHA.4816@xxxxxxxxxxxxxxxxxxxxxxx
<snip>
Hi, Ben - I remember you. Congratulations on a job well done for your
company's security. I'm sure one of the security experts will have a more
elegant idea for you, but here's mine:
How many business modeler machines are we talking about? If just a few,
why not purchase laptops just for that purpose and not join them to the
domain? Keep them off the network, too or give them their own subnet if
the program needs an Internet connection. Let them run the buggy software
and nothing else. If those machines are never joined to your network, you
don't really need to worry about what the business modeler users do. Tell
the users that they are not to use the machines for anything else, no
documents, etc. If they need to backup or transfer any data from that
program, you can have them upload it to a folder or via thumb drive or to
an NAS just for them. Since I don't know anything about how that software
works and whether you need to back up stuff from it, those are just WAGs.
In this scenario, you would set up a business modeler machine perfectly -
exactly the way you want it. Image it. Then have those machines in for
maintenance at some regular interval that makes sense to you and simply
restore the image. Voila! Clean machines again.
Hi Malke,
That's an interesting approach, I'll have to run it past the business
modeler guys, (we have 2 spare thinkpads at the moment, so it might be a use
for them).
I can think of one reason why they might reject this approach down, and
that's weight/luggage - These guys travel a fair bit, and also carry a small
projector for presentations with them, they may not be open to the idea of
having to carry another laptop around with them.
However this all comes down to whether they actually need to have their
standard company laptop with them, maybe they can use that at home/in the
office for emails, VPN etc, then use the second laptop for modeler
development & onsite presentations.....Hmmm an interesting idea, will have
to give this serious thought - thanks!
Many thanks
Ben
.
- Follow-Ups:
- References:
- Prev by Date: Re: Cox Security Suite vs. Norton or McAfee ??
- Next by Date: Re: Installing Software without being Local Admin?
- Previous by thread: Re: Installing Software without being Local Admin?
- Next by thread: Re: Installing Software without being Local Admin?
- Index(es):
Relevant Pages
|
