[WEB4LIB] Lovers of Fortress Convince Me

[Jon Legree]

You can disable Outlook Express using group policies. The setting is:
User Configuration -> administrative templates -> System -> Don't run
specified Windows applications.
Add the executable for Outlook Express - msimn.exe

Works for us!

Jon Legree
Library Technology Specialist
Yorba Linda Public Library
Yorba Linda, CA
jon at ylpl.lib.ca.us



-----Original Message-----
From: web4lib at webjunction.org
[mailto:web4lib at webjunction.org]On Behalf Of GRAY, PAUL
Sent: Monday, August 05, 2002 1:53 PM
To: Multiple recipients of list
Subject: [WEB4LIB] Lovers of Fortress Convince Me


We have just upgraded to W2K server (from NT4) and I am in the process of
developing a lock-down using Group Policies.
So far -- the only thing I have found that I can't secure using this is
Outlook Express --
We don't want users able to access this from the 'New Message' or Send URL
or Send Page choices in IE.

I'm going to be faced in the next couple of days with a meeting with some
folks who have not seen what we can do using W2K's internal resources -- and
some of them are going to insist we really NEED Fortress and Cooler --
largely because someone else told THEM that we did.



We are using IE 6 as our front end. We have about 6 local cd-rom products
that we run using KixStart Scripts -- everything else users access is
Web-based.  Basicly I just need to prevent users from installing/running
their own software (chat clients etc) and prevent them from saving to our C:
or network drives (saving to their A: drive is no only ok - but encouraged).

I'm from the school of thought that the more layers of programs you pile
on -- the greater the chance of unwanted side effects.
So I am leaning toward NOT adding these extra pieces.

Many of you know much more about Fortress and Cooler and W2K Group Policies
than I do --
So - before I go toe to toe -----
Convince me I'm wrong --

Thanks

Paul H. Gray
Library Manager - LAN & CLC
TCC Northeast Campus
Hurst, TX