[WEB4LIB] Lovers of Fortress Convince Me

[Jodi Thomson]

We had the same problem and resolved it by deleting all the files from
and then removing all NTFS permissions, including those of SYSTEM and
ADMINISTRATORS, from the \Program Files\Outlook Express directory. You
will have to uncheck the 'Allow inheritable permissions....' box also. 
In this way when they select 'New Message', etc from IE it comes up with
a message saying it can't find 'Outlook Express'
I can forward a copy of our Group Policy for Public Access machines if
wanted


Regards
Jodi

------------------------------------------------------------------------
Jodi W. Anderson (Mr) A+, MCP - Computer Systems Consultant
Waikato University Library - Computing Operations Group
Ph: +64 7 838 4323
email: jodi at waikato.ac.nz

"Right now I'm having amnesia and deja vu at the same time. I think I've
forgotten this before." 


> -----Original Message-----
> From: GRAY, PAUL [mailto:PAUL.GRAY at tccd.net] 
> Sent: Tuesday, 6 August 2002 08:56
> To: Multiple recipients of list
> Subject: [WEB4LIB] Lovers of Fortress Convince Me
> 
> 
> We have just upgraded to W2K server (from NT4) and I am in 
> the process of developing a lock-down using Group Policies. 
> So far -- the only thing I have found that I can't secure 
> using this is Outlook Express -- We don't want users able to 
> access this from the 'New Message' or Send URL or Send Page 
> choices in IE.
> 
> I'm going to be faced in the next couple of days with a 
> meeting with some folks who have not seen what we can do 
> using W2K's internal resources -- and some of them are going 
> to insist we really NEED Fortress and Cooler -- largely 
> because someone else told THEM that we did.
> 
> We are using IE 6 as our front end. We have about 6 local 
> cd-rom products that we run using KixStart Scripts -- 
> everything else users access is Web-based.  Basicly I just 
> need to prevent users from installing/running their own 
> software (chat clients etc) and prevent them from saving to 
> our C: or network drives (saving to their A: drive is no only 
> ok - but encouraged).
> 
> I'm from the school of thought that the more layers of 
> programs you pile on -- the greater the chance of unwanted 
> side effects. So I am leaning toward NOT adding these extra pieces.
> 
> Many of you know much more about Fortress and Cooler and W2K 
> Group Policies than I do -- 
> So - before I go toe to toe -----
> Convince me I'm wrong -- 
> 
> Thanks
> 
> Paul H. Gray
> Library Manager - LAN & CLC
> TCC Northeast Campus
> Hurst, TX
> 
> 
> 
>