Solved

How to tighten client security?

Posted on 2007-11-27
7
284 Views
Last Modified: 2013-12-04
Hi experts!

I have setup a SBS 2003 server with a domain and 17 client computers. I used the SBS wizard to att the computers to the domain, however users are still able to install software and perform other tasks in their computers.

What is the best way to tighten security on client computers so that users do not have privileges to install additional software?

Thanks a lot

glopezz
0
Comment
Question by:glopezz
7 Comments
 
LVL 29

Accepted Solution

by:
Michael W earned 125 total points
ID: 20359406
Its called using Group Policy (GPO), utilizing the Software Restriction Policies.

Using Software Restriction Policies to Protect Against Unauthorized Software
http://technet.microsoft.com/en-us/library/bb457006.aspx

How To Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/kb/324036
0
 
LVL 29

Expert Comment

by:Michael W
ID: 20359528
Another site with actual screen shots for what needs to be modified:

http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html
0
 
LVL 13

Expert Comment

by:cshepfam
ID: 20359945
You definately want to create Group Policies, but also, if you want to stop users from downloading and installing software and music, create a file screen.  You can select what type of files you don't want users to install or download such as:  mp3,wav,exe, etc...

http://blogs.techrepublic.com.com/datacenter/?p=201&tag=nl.e071


You may want to consider purchasing a software proxy.  You can have more control over what users do over the internet.  

http://www.youngzsoft.net/ccproxy/
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 8

Expert Comment

by:MotoCrazy
ID: 20363341
"You may want to consider purchasing a software proxy.  You can have more control over what users do over the internet."

Microsoft ISA server can completely lock down the internet and allow only the sites that you authorize.

http://www.microsoft.com/technet/isa/2006/downloads/default.mspx  <-- TRIAL
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20410715
MotoCrazy... you generally don't use a stand-alone version of ISA server with SBS because it's included in the premium version and the cost to upgrade to that is about a third of the price.  But that's not really the issue here.  glopezz wants to restrict software installation not Internet access.

The recommendations for instituting a Software Restriction Policy are the way to go.

Jeff
TechSoEasy
0
 

Author Comment

by:glopezz
ID: 20411241
Thanks guys, I am currently testing the policies. Getting them setup is a little more complicated than I expected but I am working on it. brb
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20416112
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
OfficeMate Freezes on login or does not load after login credentials are input.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video discusses moving either the default database or any database to a new volume.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now