2 Comments
- scottmm, on 10/12/2007, -0/+0The article also fails to mention the potential dangers of malicous users. With administrative privileges a user can circumvent security policies, as well as install whatever software they wish. In Vista plenty of critical applications will still require users to enter in admin credentials to run and there is no solution allowing users to install authorized applications. Giving out the local admin password a serious security threat.
Check out BeyondTrust Privilege Manager www.beyondtrust.com. It was the first product to make it possible to reduce or elevate permissions on a per-application or per-task basis. - mimicit, on 10/12/2007, -0/+0User rights don't matter? Pfffft. I guess the speaker in that article has never run 10 machines in a normal office environment with no user limitations. Smart Admins know you can use tools to adjust the applications to work with User accounts, and essentially lock down the client. Ask the guys at sysinternals.com. You then store the profiles for the user on the server, and back up in case of user-mode rootkit infection, the client is never changed. Although I have never seen such a beast on a client that is locked down, the mythos continues. Just copy a non-infected backup of the profile and that is over right there. Network security should be dealt with in the same manor, remove non-essential rights and lock it down, then run an IDS from an spy-port of your internal switch. Oh yeah, use Samba for your Windows client server, you want better security right?


What is Digg?
The Digg Toolbar for Firefox lets you Digg, submit content, and keep track of Digg even when you're not on the Digg site. Download the official