• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 305
  • Last Modified:

How to tighten client security?

Hi experts!

I have setup a SBS 2003 server with a domain and 17 client computers. I used the SBS wizard to att the computers to the domain, however users are still able to install software and perform other tasks in their computers.

What is the best way to tighten security on client computers so that users do not have privileges to install additional software?

Thanks a lot

glopezz
0
glopezz
Asked:
glopezz
1 Solution
 
Michael WorshamInfrastructure / Solutions ArchitectCommented:
Its called using Group Policy (GPO), utilizing the Software Restriction Policies.

Using Software Restriction Policies to Protect Against Unauthorized Software
http://technet.microsoft.com/en-us/library/bb457006.aspx

How To Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/kb/324036
0
 
Michael WorshamInfrastructure / Solutions ArchitectCommented:
Another site with actual screen shots for what needs to be modified:

http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html
0
 
cshepfamCommented:
You definately want to create Group Policies, but also, if you want to stop users from downloading and installing software and music, create a file screen.  You can select what type of files you don't want users to install or download such as:  mp3,wav,exe, etc...

http://blogs.techrepublic.com.com/datacenter/?p=201&tag=nl.e071


You may want to consider purchasing a software proxy.  You can have more control over what users do over the internet.  

http://www.youngzsoft.net/ccproxy/
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
MotoCrazyCommented:
"You may want to consider purchasing a software proxy.  You can have more control over what users do over the internet."

Microsoft ISA server can completely lock down the internet and allow only the sites that you authorize.

http://www.microsoft.com/technet/isa/2006/downloads/default.mspx  <-- TRIAL
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
MotoCrazy... you generally don't use a stand-alone version of ISA server with SBS because it's included in the premium version and the cost to upgrade to that is about a third of the price.  But that's not really the issue here.  glopezz wants to restrict software installation not Internet access.

The recommendations for instituting a Software Restriction Policy are the way to go.

Jeff
TechSoEasy
0
 
glopezzAuthor Commented:
Thanks guys, I am currently testing the policies. Getting them setup is a little more complicated than I expected but I am working on it. brb
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now