QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
Yes it is.
QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
We have some of the best auditing software on the market
No you don't.
QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
our pc's are locked down and our physical audit still turns up software we didn't know about.
Then your audit sucks and your methods suck.
QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
If it makes no registry or WMI entry, you cannot see it.
Patently false.
QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
You can zip your firefox folder when you're not using it.
Wrong again. Too cumbersome, takes too much time, leaves too much of a trail.
Portable Firefox may be a solution, but only if I haven't locked down a system so hard that you can only run specific whitelisted applications.
QUOTE (Iceberg Slim @ Jul 19 2005, 10:27 pm)
IT knows all, sees all, and controls all is a myth.
Then your company needs a serious BOfH. I may be in the market for a new job.
QUOTE
I have 900 pc's that my IT is responsible for and we spend a lot of money trying to stop just such things - it's a waste of time. A clever user will always find a way.
Look into Win2K/Win2K3 administration. Learn Microsoft's Group Policy Editor. Play with
DameWare (remote control) for a bit. You can stop users doing anything you want.
From a technical standpoint you
can control the (l)users. What might slip through the cracks can be controlled by specific usage policies and management, but there's little you can't control with shipped and free tools already.
woof.