Page 2 of 2 <12
Topic Options
#177493 - 2007-07-03 11:37 AM Re: Sending Message via Network [Re: Lonkero]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11577
Loc: CA
I do, but that is being lazy. Doing it the "MS best practice" way is to leave it on and only open the ports needed, thus the lazy remark. I'm willing to bet that most Admins just turn it off.
Top
#177496 - 2007-07-03 11:49 AM Re: Sending Message via Network [Re: NTDOC]
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22343
Loc: OK
and then there are admins that install some weird client security products, which then disables controll capabilities altogether.
_________________________
!

download KiXnet

Top
#177501 - 2007-07-03 01:49 PM Re: Sending Message via Network [Re: Lonkero]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
Maybe like this:
  • via GPO, set the minimum you need to administrate a computer (protocols, ports, networks, etc...)
  • do not enable or restrict the use of firewall via GPO, just add the minimum of policies needed
  • during installation or imaging of computers, set the firewall on
  • a common user cannot switch his firewall on or off, so the firewall will stay on
  • during installation of software, the ports, protocols, programs, networks etc. needed can be added to the local firewall policy

Top
#177502 - 2007-07-03 02:18 PM Re: Sending Message via Network [Re: Witto]
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22343
Loc: OK
the thing is, you need a separate full blooded policy for out-of-office.
otherwise the administration holes will be open in the wild too.
right?
_________________________
!

download KiXnet

Top
#177537 - 2007-07-03 11:11 PM Re: Sending Message via Network [Re: Lonkero]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
In a lot of the rules, the allowed network(s) can be defined. Only in the case the computer is used in (a) network(s) with the same adress(es), certain ports are open.
It is in any way better than doing nothing.

Top
#177543 - 2007-07-04 12:17 AM Re: Sending Message via Network [Re: Witto]
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22343
Loc: OK
ja, that will work in most of the cases.
that is, in such setup that the networks outside are different.
_________________________
!

download KiXnet

Top
#177647 - 2007-07-08 01:12 PM Re: Sending Message via Network [Re: Lonkero]
ddady Offline
Getting the hang of it

Registered: 2006-09-03
Posts: 98
Thanks for all the comments. I have managed to do what i have wanted too. It's working perfectly.
Top
Page 2 of 2 <12


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 173 anonymous users online.
Newest Members
Jodey, Hiker, GTRoberts, KatieQuinn, Brennnnn
17684 Registered Users

Generated in 0.032 seconds in which 0.012 seconds were spent on a total of 14 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org