This question comes up a LOT in the IT industry, and it's almost always about giving users full internet access and admin rights on their computer
( ... )
I'm talkign about things like blocking streaming radio when your company doesn't allow physical music media to be brought in. A completely quite office for data entry is hell.
Also not talking about full admin rights and internet access on computers, that's just stupid. Lock out the rights to onstall and/or download and voila. most of your problems are solved. Put something like Squid on the computers.
Boneheads will always find ways of ruining networks, regardless of what limitations you put on their internet access. I'd rather have some rocket surgeon screw his box up with BonziBuddy than have that same genius spam out digital pix of his vaction to 250 people.
On the other side, though, you've got people with unrestricted physical access to their hardware, and under those circumstances, it is absolutely impossible to prevent them from escalating themselves local Admin rights. It's not all that tough, really (although well beyond the BonziBuddy kids, for the most part) - drop something like a local service to block websites, and if someone manages to escalate and shut the service off, let 'em. Those aren't the people you're worried about.
Comments 4
Reply
Reply
Reply
On the other side, though, you've got people with unrestricted physical access to their hardware, and under those circumstances, it is absolutely impossible to prevent them from escalating themselves local Admin rights. It's not all that tough, really (although well beyond the BonziBuddy kids, for the most part) - drop something like a local service to block websites, and if someone manages to escalate and shut the service off, let 'em. Those aren't the people you're worried about.
Reply
Leave a comment