-----Original Message-----
From: Roy Pait [mailto:roy.pait (at) marlboroughschool (dot) org [email concealed]]
Sent: Friday, October 17, 2003 9:54 AM
To: tstein (at) nassaucountyny (dot) gov [email concealed]; <@securityfocus.com
Subject: RE: RPC Scan Issues
A script itself will work, but for any patch on a MS machine you need to
have administrative rights. As a school we've found the quandary that we
want to lock down the machines but also keep them updated. This has lead
to granting administrative rights to the student workstation account,
normal rights for the network, and then selectively locking down
individual keys in the registry (i.e. current user/...../internet
explorer/main/, /control panel/desktop/, etc). Painstaking, but the only
way we've found so far. My question is what about all MS environment? If
the user doesn't have admin rights to the local machine, can updates be
done automagically? Or do they have the same issue?
------------------------------------------------------------------------
---
FREE Whitepaper: Better Management for Network Security
Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console
Easy, SUS, runs as a service, no admin rights required. Even does SP's
now. Price is right too.
http://www.microsoft.com/windowsserversystem/sus/default.mspx
-----Original Message-----
From: Roy Pait [mailto:roy.pait (at) marlboroughschool (dot) org [email concealed]]
Sent: Friday, October 17, 2003 9:54 AM
To: tstein (at) nassaucountyny (dot) gov [email concealed]; <@securityfocus.com
Subject: RE: RPC Scan Issues
A script itself will work, but for any patch on a MS machine you need to
have administrative rights. As a school we've found the quandary that we
want to lock down the machines but also keep them updated. This has lead
to granting administrative rights to the student workstation account,
normal rights for the network, and then selectively locking down
individual keys in the registry (i.e. current user/...../internet
explorer/main/, /control panel/desktop/, etc). Painstaking, but the only
way we've found so far. My question is what about all MS environment? If
the user doesn't have admin rights to the local machine, can updates be
done automagically? Or do they have the same issue?
------------------------------------------------------------------------
---
FREE Whitepaper: Better Management for Network Security
Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console
Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_focus-ms_031015
------------------------------------------------------------------------
---
[ reply ]