Re: Sales guys that need to run Server OS - Impact on Domain?

From: Robert Moir (robert.moir@ntlworld.com)
Date: 10/02/02 

From: "Robert Moir" <robert.moir@ntlworld.com>
Date: Wed, 2 Oct 2002 22:19:32 +0100

"Scott Townsend" <scott@-NO-SPAM.serra.com> wrote in message
news:u4VpsLWaCHA.1308@tkmsftngp12...
> How do you prevent them from installing other Server Services (WINS, DNS,
> DHCP, etc) while still allowing them to install the software they are
> demoing?
>
> They would still need the ability to install software and patches on the
> machine, though I dont want them to beable to install other Windows
> services. We usaully put the i386 Directory on the C-Drive incase they
> need something when they install their software, or when we do updates. We
> could take it off, but I wouldn't put it past some of them to get a copy
of
> a Server disk somewhere...

Well as Keith alluded to, if you honestly can not or do not trust these
people at all but have to give them servers with admin rights then you've
got a serious problem. And while we're happy to bat ideas and solutions
around in here all day cos that's what we do here, technological solutions
are not always a good fit for non technological problems.

Again, having a server on one's desktop doesn't have to compromise the
network itself in the least. I'm repeating Keith again, sorry, but from the
"locking down users on the domain" point of view it's not much different
from a workstation. If your concern is that you need to let them effectively
admin the local server, but you can't trust them with the ability to trash
the systems then you've got two opposite goals that you need to balance here
imho and that's a strategic problem as much as it is a technological one.

Rob Moir

Relevant Pages

  • Re: New Event Log Errors!
    ... Somehow along those lines I'd also installed the Certificate Authority ... Did you apply the last Server Pack for SBS Server? ... Please install Windows Support Tools on the win2k3 sp1 problematic ... Microsoft is providing this information only as a convenience to you: ...
    (microsoft.public.windows.server.sbs)
  • unsubmit
    ... Using a development server also [Roberto ... Can't find cable Internet connec [Roberto ... You can fix that manually by 'apt-get install ... > development machine, so if the production server goes down, we can ...
    (Debian-User)
  • Re: Fax on Terminal Server from SBS2K3
    ... please make sure the Fax service is installed on the TS server. ... you can try the steps below to install Shared Fax Client: ... 248340 Installing and Using Programs in Windows 2000 Terminal Services ...
    (microsoft.public.windows.server.sbs)
  • Re: fedora-list Digest, Vol 36, Issue 69
    ... The old server which i want to replace, runs on RedHat8 and these settings work. ... FC6 through the rear view mirror ... and want to install Debian on Virtual Manger. ... Occasionally your car would die on the freeway for no reason. ...
    (Fedora)
  • Re: Fax on Terminal Server from SBS2K3
    ... activity logging in the shared fax in the server box. ... Microsoft CSS Online Newsgroup Support ... Follow the wizard to install Shared ... you can try the steps below to install Shared Fax Client: ...
    (microsoft.public.windows.server.sbs)