and prepare to deal with it... LAN TECH and we have a standard image that we use for ALL of our computers which we can reload on a computer within 20 minutes at worst (10 minutes best), including the single required reboot. Network Computing wants us to use their SMS imaging which requires hours for base image without packages plus 8 reboots - so we use Novell imaging. Other than that, we have our own Windows Update Server - when you can't get to Microsoft, mcafee enterprise antivirus - pushing the updates, Ad-Aware (cleans at bootup), Spybot (when problems do arise), and Pest Patrol (cleanup hitter), as well as a network folder of nothing but specific anti trojan, anti spyware, repair tools. We use group policy to limit specific programs, but for troublesome users we turn their computers into kiosks - nothing can be changed and nothing to do but their jobs. We use VNC to provide immediate "hands on" response and zenworks to push rollout applications/updates (without Novell client installed) or kixtart scripts.
I also make sure that all of my users get information on the latest threats as soon as I can. We do have other levels of security available from the network and email teams, but my users do not need to depend on them. Now if I could just get them to quit giving out their work email addresses to spammers...
there was an IP based Novell client available that actually worked. We have lots of users where I work, who are devoted Apple and Unix junkies... Problem is that we no longer run IPX and prosofteng's IP client (including the latest beta) has not worked with our Novell 5.x servers. Has ANYONE been able to make the OS X IP client work? It won't even browse the network for available trees here.
the tea timer and host file blocking has helped me keep problem users from installing crapware, etc. that would change the hosts file...
and prepare to deal with it... LAN TECH and we have a standard image that we use for ALL of our computers which we can reload on a computer within 20 minutes at worst (10 minutes best), including the single required reboot. Network Computing wants us to use their SMS imaging which requires hours for base image without packages plus 8 reboots - so we use Novell imaging. Other than that, we have our own Windows Update Server - when you can't get to Microsoft, mcafee enterprise antivirus - pushing the updates, Ad-Aware (cleans at bootup), Spybot (when problems do arise), and Pest Patrol (cleanup hitter), as well as a network folder of nothing but specific anti trojan, anti spyware, repair tools. We use group policy to limit specific programs, but for troublesome users we turn their computers into kiosks - nothing can be changed and nothing to do but their jobs. We use VNC to provide immediate "hands on" response and zenworks to push rollout applications/updates (without Novell client installed) or kixtart scripts.
I also make sure that all of my users get information on the latest threats as soon as I can. We do have other levels of security available from the network and email teams, but my users do not need to depend on them. Now if I could just get them to quit giving out their work email addresses to spammers...
there was an IP based Novell client available that actually worked. We have lots of users where I work, who are devoted Apple and Unix junkies... Problem is that we no longer run IPX and prosofteng's IP client (including the latest beta) has not worked with our Novell 5.x servers. Has ANYONE been able to make the OS X IP client work? It won't even browse the network for available trees here.