Page 1 of 1 1
Topic Options
#102923 - 2003-07-14 07:01 PM Lockdown
Allen Administrator Offline
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4572
Loc: USA
Anyone know a reg-hack to disable the taskbar. Basically we are looking to have a desktop with only the specified icons we put on there and no other options.
_________________________
(... better days ahead)

Top
#102924 - 2003-07-14 07:03 PM Re: Lockdown
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
damn, I have one wksta at work with that...
you will need to wait at least until tomorrow until I can provide the answer, but indeed, that's not hard.

real lockdown with winNT is easy as taking a pee.
_________________________
!

download KiXnet

Top
#102925 - 2003-07-14 10:36 PM Re: Lockdown
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: CA
hehehe...

Have to disagree. Very hard to LOCK down NT and still have a useable system.

Smart user can overcome most lock down measures if they are persistent and knowledgeable. If you really force it so that they are really locked down, then legacy apps quit working and even normal workflow of the user is interuppted.

So, yes - maybe you can lock it down, but if locked down hard, normal workflow is impacted.

I guess for me the keyword there is USEABLE

Top
#102926 - 2003-07-14 10:48 PM Re: Lockdown
Allen Administrator Offline
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4572
Loc: USA
[Razz]

For our users who only use a Terminal Emulation program, anything other than the icon for that program can be overwhelming/confusing... I have seen pcs where the task bar was removed and thought it might helpful here... but you are definately right, anyone with enough knowledge will eventually get around it.
_________________________
(... better days ahead)

Top
#102927 - 2003-07-14 10:56 PM Re: Lockdown
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
there is kiosk mode of IE.

and something about changing the Shell...
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#102928 - 2003-07-14 11:14 PM Re: Lockdown
Richie19Rich77 Offline
Seasoned Scripter
*****

Registered: 2002-08-16
Posts: 624
Loc: London, England
I have been using restricted desktops for about 5 years.

You are correct that legecy systems cannot run correctly.

If you ar only running one application, or custom in house application, I would suggest writing a script in Kixforms and then make that script as the Custon Shell.

I have done this for application that cannot work in are standard restricted profiles.

There is so many backdoors into the Microsoft explorer shell, it is better to write your own.

Then just restrict the taskbar, and you are sorted.

I am looking at writing my own script in kixforms that emulates the Windows Start Menu, then users cannot complain about the change in apperance.

Thanks

Rich

Top
#102929 - 2003-07-15 04:14 AM Re: Lockdown
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
like told...
build a system which was locked down.
it only runs automatically the terminal software to connect to mainframe.
and it allows no other executable run by user.

this far, no user has made up a way around it ( I know some simple ones though...)
that' is proven by their bleed for word and excel access on the computer.

anyway, locked down system is locked down as far as the local admin passwd is lccked.
with locked down by ignorance I have ran a single wksta with not a single user getting a way around it during this 1-1,5 year test.

I think it's fair to say:
if you think your admin pass is secure, so is properly locked down nt-wksta... or even better
_________________________
!

download KiXnet

Top
#102930 - 2003-07-15 04:18 AM Re: Lockdown
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
I think I have to say it again.
if you want secure system, stop dreaming.
all the time you run your domain, you are running a security risk.
lets face it, it's just matter of hours or days before your admin account will be exposed.

our job is not to make it bulletproof.
our job is to make it as hard as possible to find those tiny holes
_________________________
!

download KiXnet

Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
1 registered (StuTheCoder) and 798 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.054 seconds in which 0.023 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org