I have 4 new vista business computers that I want to secure properly. I use
a Admin account for maintenance and a limited account for other people.
I have a hardware firewall with a webblocker. This helps when on the
internet. I use anti virus.
Most users are general users of internet and office products.
It's the few savvy users that try to bypass firewall and also install free
games , wallpaper, scrennsavers(possibility with adware/spyware).
I also had a vista computer that was running a repair program. I assume it
was vista repair. Apparently someone tried to hack a computer.
In Win XP I use the MMC ( Microsoft management console ) to prevent access
to changing desktop,wallpaper,control panel.

josef wrote:
[color=blue]
> I have 4 new vista business computers that I want to secure properly. I
> use a Admin account for maintenance and a limited account for other
> people. I have a hardware firewall with a webblocker. This helps when on
> the internet. I use anti virus.
> Most users are general users of internet and office products.
> It's the few savvy users that try to bypass firewall and also install free
> games , wallpaper, scrennsavers(possibility with adware/spyware).
> I also had a vista computer that was running a repair program. I assume it
> was vista repair. Apparently someone tried to hack a computer.
> In Win XP I use the MMC ( Microsoft management console ) to prevent
> access
> to changing desktop,wallpaper,control panel.[/color]

The best way to secure business computers is to use a server and Active
Directory. You can control everything from the server and lock things down
quite tightly. Even though the initial setup is more expensive, it will save
you time and money in the long run.

Another good thing for Internet filtering to do is use something like OpenDNS
and filter from there. You mentioned a hardware firewall. It really depends on
which one you're using how effective it is. You can set up a filtering system
using Untangle, too.

But setting group policies from the server will stop people from installing
anything.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
[url]http://www.elephantboycomputers.com/#FAQ[/url]