Hi,
Is there a way to prevent people within lan to install gotomypc
or
is there a way to detect if people install gotomypc?
Thx
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Sorry if the question is dump:
>>Does your company run DNS services? If so, just create a zone for gotomypc.com - your server will answer any request for a gotomypc.com server and timeout the >>clients.
How can I check that?
>>if exist "c:\program files\gotomypc\program.exe
I run this on my machine, under cmd, right? thx
How big is your company? Do you run Active Directory? What IP address is your DNS server?
The command given would be put in a login script. You'd have to change it to check for appropriate gotomypc files (I've never used it, so I don't know the exact file names; my example was just that, an example). You'd also have to have a server with a share that allows users to write to it. The >\\server\share\gotomypc.l
Then you would just open the gotomypc.log file and it would list all computers with gotomypc installed on it.
We have only about 10 people.
"Active Directory", I assume that is the place you create users.......is yes, then, yes, we have that.......
>>What IP address is your DNS server?
I am not following...sorry
For the second part, if I could block it on the server, the second part is not neccessary, right? thx
Yes, if you can block it on the server, then you don't need to see if it's on PCs - the PCs simply shouldn't be able to connect.
On a client, type "ipconfig /all" and note the DNS Servers. If they start with 192.168. or 10. then you are probably using local DNS services (a good thing). go to the server and open the DNS Administrative tool. Add a new zone - expand the server name and look for "Forward lookup zones" and right click it. Select "New Zone..." and create the zone as a "Standard Primary" zone. Set the zone name to "gotomypc.com" without the quotes, then finish out the wizard with the defaults. That should do it. If you try to browse www.gotomypc.com, it should time out or quickly go to a "page not found" type error.
mcrmg,
> 1. There are so many similar services out there, what do people usually do?
Larger companies will do a number of things.
1. Their users are never given admin rights, so they CAN'T install ANYTHING.
2. Hardware firewalls and/or proxy servers (not necessarily your average Linksys Router) are configured to prevent access to these services
3. That DNS trick.
And many companies ENCOURAGE use of remote access, though usually through VPN.
>
> 2. How do people do to prevent users in lan to abuse network? (Not
> sure if it is releated to the question I asked)
See above - Again, don't let your users be admins. Install Microsoft ISA server or a similar product where you can more easily restrict access to web sites and other undesireable content.
How are/have your users been abusing your network
>
> 3. one more question about gotomyoc, f they access from home, after creating
> a new zone, can they still acess office pc from home? thx
Users at home will be able to get the "gotomypc" web site, however, provided the service uses that DNS domain as the address it maintains a connection with, then the software installed on your PCs should not be able to communicate with the service and ultimately, your users won't be able to access the office machines.
My guess is the above confuses you a little bit. For example, some companies use other domain names for certain services. For example, when I register a domain, I do it at www.active-domain.com. BUT, when I manage this registration I go to www.domainpanel.com - it's a different domain. If you did similarly to active-domain.com, no one could register a domain there, but if they HAD a domain through them, they could STILL access www.domainpanel.com (unless you made a DNS zone for THAT domain name). The point is, if www.gotomypc.com is only the "marketing" domain name, used for their web site and to download the software, then you've blocked the users from downloading the software and visiting the web site. BUT, if gotomypc.com uses "remoteconnections.com" (for example; I have no idea if they do or not); then you are NOT blocking that domain and they could still connect. Follow?
There are ways around lots of these blockings. For example, someone could do some research and get the ip address of the gotomypc server and put in a local HOSTS file entry on the machine that points it to the correct address. Then DNS isn't used when there's a local hosts entry. How can you block that? Don't let your users be admins. The TRULY savvy users can figure out ways around problems. That's why if you deny admin rights, you're safest (people can even get around those, but that's one of the harder things to do, in my opinion).
Thanks for the replaying........
>>See above - Again, don't let your users be admins. Install Microsoft ISA server or a similar product where you can more easily restrict access to web sites and >>other undesireable content.
Is it easy to set up?
>>How are/have your users been abusing your network
Prople (some) being downloading stuff through newsgriup, playing online games when boss is not around.
>>About giving put admin rights...
1. Are you talking about local admin? If yes:
a.I tried to taken out the admin, but users could not use some of the programs they previous installed......
b.Whe they need to install something, I will need to give out the password, then reset it again?
Thx
ISA server SEEMS easy to setup - but I'm JUST starting to learn it - installed it two nights ago and had to uninstall it to get things working again. Hope to try again soon.
Yeah, done that, but mostly around christmas or after work... I guess your coworkers don't take things as seriously?
a) By now, ALL programs whould work - or be able to work - with admin rights revoked. Which software in particular are you having issues with that with? (Sometimes you can just put users in the Power Users local group and that solves the issues).
b) that's one way. But in most companies (large companies) the admins/techs install software, users never have admin rights. So only "approved" software is ever installed. No games, no other junk.
>>ISA server SEEMS easy to setup
I guess I will hold on to it...
>>Yeah, done that, but mostly around christmas or after work... I guess your coworkers don't take things as seriously?
They can do the job, that's for sure, but you just do not know what they are doing, when things are slow, they tend to install EVERYTHING they can get, once the machine is screwed, they blame it on the "IT guy".......*sigh*.........
>>a
There is a program called "Spy Sweeper", once I took admin out, it says it needs admin rights to run.
If I give them poer users rights, can they install programs?
Power user rights cannot install programs.
Don't use spysweeper. There are other programs out there. Besides, giving admin rights to users so they can run spysweeper is ALSO giving SPYWARE admin rights. If the user has only user or power user rights, then the Spyware only has those rights as well. Less dangerous that way. Also, don't use Internet Explorer or Outlook express. Your virus and spyware problems will almost disappear.
>>There are other programs out there.
Do you think it is worth to buy anti spyware server edition?? Curreny, most of the machine in our office use MS anti spyware......
>>don't use Internet Explorer or Outlook express...
Use firefox instead?? The problem is that we have a web app that was designed for IE only.....
Thx
Ah yes. That can be a problem. (IE Web App).
Honestly, in my experience, all anti-spyware is only partly effective. some handle this spyware, others handle that. Spybot does well on some, not so well on others. CoolWebShredder fails to clean a few cool web stuff... it's frustrating and hence I recommend ditching IE. Personally, I don't have spyware problems at home - or really at work - most users just do work and none are admins. When I go to a client that has spyware problems, I use silent-runners to identify the spyware and then boot to safe mode and remove it. Personally, I'd remove the users as admins, and use just the MS Spyware app. I also use McAfee Antivirus (have for YEARS). I find it quite effective and at least the enterprise edition is even catching SOME spyware now.
There are a couple ways to block access to gotomypc.com
1) Have your firewall block poll.gotomypc.com, and/or it's IP
2) Ask GoToMyPC's Authorization Management Service to block your Company's public IP for accessing their service. They can be reached at GoToSales@citrixonline.com
For more detailed information, goto:
https://www.gotomypc.com/h
and
https://www.gotomypc.com/d
Business Accounts
Answer for Membership
by: leewPosted on 2005-03-10 at 16:03:29ID: 13512673
Does your company run DNS services? If so, just create a zone for gotomypc.com - your server will answer any request for a gotomypc.com server and timeout the clients.
To find out if it's on a machine, install it so you familiarize yourself with the product, then look for it's existance in a script - for example:
if exist "c:\program files\gotomypc\program.exe