Brad Marks
BradM at blackforestltd.com
Wed Mar 13 13:37:28 CDT 2013
All, Thanks to everyone who shared info on this topic. It appears that there are several options and it appears that I have a lot to learn. Brad -----Original Message----- From: accessd-bounces at databaseadvisors.com [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of James Button Sent: Tuesday, March 12, 2013 2:31 PM To: Access Developers discussion and problem solving Subject: Re: [AccessD] Lock Down PC Jim, While the notes in that post <http://www.techrepublic.com/blog/10things/10-ways-to-reduce-security-he adaches-in-a-byod-world/3591?tag=nl.e101&s_cid=e101&ttag=e101> Are reasonable, to my view they address the incidental probabilities associated with inexperienced, or inept user. I believe that site security should start from the consideration of both the interloper, and authorised users intending to inappropriately acquire the data held on your system, or to use your systems for their own purposes. You should expect these 'users' to come with systems that can connect their network to your network, and thus to your data, and some of your users working environment and access, and maybe, their probable aim of controlling your admin level. Maybe considering the password, or even unencrypted access to the backups being a nice neat access point. Then there is the physical attack possibilities - Removing a PC, (or just the hard drive) for modification Attaching a wireless dongle or device with a 32GB microSD - scarcely larger than the hard bit of the USB connector, and certainly smaller than the cover to the cable connection. Ignoring the possibilities of a screenscraper, or comms monitoring application there is still a lot of ways for data on a LAN/WAN, or server facility to be acquired in bulk. And - as I posted a short while ago, I was working at a site where 'security' level work was being done, with full physical access recording and control - but someone stole a server (maxi-tower PC sized) - via the scaffolding errected to allow the window maintenance contractors to do their work. Well - the building owner had scheduled it as a 5 yearly extra safety & maintenance check on the annual cleaning/service, shame the tenant company management didn't consider it needed extra security to be paid for! JimB ----- Original Message ----- From: "Jim Lawrence" <accessd at shaw.ca> To: "'Access Developers discussion and problem solving'" <accessd at databaseadvisors.com> Sent: Tuesday, March 12, 2013 6:52 PM Subject: Re: [AccessD] Lock Down PC > It seems that the application DeepFreeze is what the colleges and schools > are using, all over...even here. Must be a good choice. > > Here is an TechRepublic article on how to manage BYOD computers which is > what a computer can quickly become if left in the hands and control of > users: > > http://www.techrepublic.com/blog/10things/10-ways-to-reduce-security-hea dach > es-in-a-byod-world/3591?tag=nl.e101&s_cid=e101&ttag=e101 > > Jim > > -----Original Message----- > From: accessd-bounces at databaseadvisors.com > [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Tina Norris > Fields > Sent: Tuesday, March 12, 2013 10:14 AM > To: Access Developers discussion and problem solving > Subject: Re: [AccessD] Lock Down PC > > DeepFreeze is what we use on campus at Northwestern Michigan College, > too. Nothing saved on a local computer will still be there after reboot. > T > > Tina Norris Fields > tinanfields-at-torchlake-dot-com > 231-322-2787 > > On 3/12/2013 9:44 AM, Jason Strickland wrote: >> DeepFreeze will lock down PC so that all changes will revert upon reboot. >> We use it at work on all of our labs and student laptops. >> All, >> >> > > -- > AccessD mailing list > AccessD at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/accessd > Website: http://www.databaseadvisors.com > > -- > AccessD mailing list > AccessD at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/accessd > Website: http://www.databaseadvisors.com -- AccessD mailing list AccessD at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/accessd Website: http://www.databaseadvisors.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.