System Policies

Thanks John for the info. I think I will go that route instead of buying
an add-on.

-----Original Message-----
From: John [mailto:JYohann@...]
Sent: Tuesday, August 29, 2000 11:27 AM
To: vantage@egroups.com
Subject: RE: [Vantage] System Policies


Yes. You must use profiles to enable policies to work. It is a little
tricky to get working but works well when implemented. I've used it for
the
past year on 11 terminals in our shop and had no problems. Make sure
you
set the policy to not save any changes made to the machine, this way if
someone does change something a fresh boot will return the system to
it's
initial state. I also have Ghost images of my data collection pc's hard
drives saved on cd-rom in case of severe tampering/hacking. I can wipe
a
drive and restore the entire system over the network in less than 15
minutes. Good luck.

John

-----Original Message-----
From: todd sarber [mailto:tsarber@...]
Sent: Tuesday, August 29, 2000 11:16 AM
To: 'vantage@egroups.com'
Subject: [Vantage] System Policies


What is everybody using to secure the desktop as far as locking down
screensavers, loading software, accessing mapped drives, and that kind
of stuff? I have had a little bit of trouble setting up policies. The
only way I got workstations to pull the policy for the users/computers
down from the netlogon share was to turn on profiles on the machines. Is
that correct? I didnt think I had to do that and I cant find any
documentation that states that I have to turn profiles on. Is there
third party software that anybody would recommend?

TIA

Todd Sarber
Accra-Fab, Inc.


We no longer allow attachments to files. To access/share Report Files,
please go to the following link: http://www.egroups.com/files/vantage/
(Note: If this link does not work for you the first time you try it, go
to
www.egroups.com, login and be sure to save your password, choose My
Groups,
choose Vantage, then choose Files. If you save the password, the link
above
will work the next time you try it.)




We no longer allow attachments to files. To access/share Report Files,
please go to the following link: http://www.egroups.com/files/vantage/
(Note: If this link does not work for you the first time you try it, go
to www.egroups.com, login and be sure to save your password, choose My
Groups, choose Vantage, then choose Files. If you save the password,
the link above will work the next time you try it.)
Todd you got further than I did with the System Policy editor. I gave up and
downloaded crowd control ( www.sahalie.com <http://www.sahalie.com> ). that
somebody else on this list suggested.
Works well for what I need (secure data collection stations on shop floor).

Dan Shallbetter
States Electric Mfg.

-----Original Message-----
From: todd sarber [mailto:tsarber@...]
Sent: Tuesday, August 29, 2000 10:16 AM
To: 'vantage@egroups.com'
Subject: [Vantage] System Policies


What is everybody using to secure the desktop as far as locking down
screensavers, loading software, accessing mapped drives, and that kind
of stuff? I have had a little bit of trouble setting up policies. The
only way I got workstations to pull the policy for the users/computers
down from the netlogon share was to turn on profiles on the machines. Is
that correct? I didnt think I had to do that and I cant find any
documentation that states that I have to turn profiles on. Is there
third party software that anybody would recommend?

TIA

Todd Sarber
Accra-Fab, Inc.




[Non-text portions of this message have been removed]
Thanks Carlos. They are Win9x clients and I did put config.pol in the
correct dir. on the PDC. But they wont download unless I enable profiles
on the clients themselves.

-----Original Message-----
From: Carlos A. Quintela [mailto:caq@...]
Sent: Tuesday, August 29, 2000 9:03 AM
To: vantage@egroups.com
Subject: RE: [Vantage] System Policies


Use "System Policy Editor" and create a policy file
(winnt_root\system32\repl\import\scripts\ntconfig.pol) on your domain
controller. (setup replication between DC's if you have multiple DC's)
You
can setup policies for users, groups, or computers. This will allow you
to
secure stations as much as you want. If the user/group/computer has
already
connected to the domain, then there is already a policy stored locally
on
their workstation. From a domain controller, you can "connect" to their
workstation's user profile, and make the necessary adjustments. By the
way,
if you have Win95/98 type users, you will need to create a file
"config.pol"
for those computer accounts. Hope this helps.

Adrian Quintela

-----Original Message-----
From: todd sarber [mailto:tsarber@...]
Sent: Tuesday, August 29, 2000 10:16 AM
To: 'vantage@egroups.com'
Subject: [Vantage] System Policies

What is everybody using to secure the desktop as far as locking down
screensavers, loading software, accessing mapped drives, and that kind
of stuff? I have had a little bit of trouble setting up policies. The
only way I got workstations to pull the policy for the users/computers
down from the netlogon share was to turn on profiles on the machines. Is
that correct? I didnt think I had to do that and I cant find any
documentation that states that I have to turn profiles on. Is there
third party software that anybody would recommend?

TIA

Todd Sarber
Accra-Fab, Inc.


We no longer allow attachments to files. To access/share Report Files,
please go to the following link: http://www.egroups.com/files/vantage/
(Note: If this link does not work for you the first time you try it, go
to
www.egroups.com, login and be sure to save your password, choose My
Groups,
choose Vantage, then choose Files. If you save the password, the link
above
will work the next time you try it.)



We no longer allow attachments to files. To access/share Report Files,
please go to the following link: http://www.egroups.com/files/vantage/
(Note: If this link does not work for you the first time you try it, go
to www.egroups.com, login and be sure to save your password, choose My
Groups, choose Vantage, then choose Files. If you save the password,
the link above will work the next time you try it.)
RED HAND SECURITY GIVE YOU THAT AND MORE, LIKE LOGS OF ALL WINDOWS OPENED. Its resonably priced too go to hiddenman.com. Thus program is recomended by ZDTV Leo thought highly of it.

Shirley Graver
Sys Admin
Rubber Associates
Thanks much for the info.

-----Original Message-----
From: Rubberasc@... [mailto:Rubberasc@...]
Sent: Tuesday, August 29, 2000 9:23 AM
To: vantage@egroups.com
Subject: Re: [Vantage] System Policies


RED HAND SECURITY GIVE YOU THAT AND MORE, LIKE LOGS OF ALL WINDOWS
OPENED. Its resonably priced too go to hiddenman.com. Thus program is
recomended by ZDTV Leo thought highly of it.

Shirley Graver
Sys Admin
Rubber Associates


We no longer allow attachments to files. To access/share Report Files,
please go to the following link: http://www.egroups.com/files/vantage/
(Note: If this link does not work for you the first time you try it, go
to www.egroups.com, login and be sure to save your password, choose My
Groups, choose Vantage, then choose Files. If you save the password,
the link above will work the next time you try it.)