off. ""Brian"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > You could lock down the boxes, you know secure case monitoring, use nt/2k so > only superuser can install software, disable floppy.
I knew a company that tried that once. Turned out, the tech-savvy dudes responded by just bringing in their own personal laptops and used that to do the objectionable behavior - messenger, porn, Napster, games, whatever. It was pretty much untraceable when wireless Metricom Ricochet was still around. But even when that died, they just concealed themselves with a bunch of http proxies. And, now that I think about it, you don't even need to bring in your own computer at all. I heard of one guy who took his company PC and got into its BIOS (I believe he did a password-recovery to bypass the BIOS password the company set up), and he set the computer to boot from CD. He then went down to the local CompUSA, bought himself a super-cheapo hard-drive, hooked it to his company PC, and then, using his personal Windows CD, installed a fresh copy of Windows on that 2nd drive, dual-boot. So when he needed to access company resources, he would boot into the company-sanctioned Windows. When he wanted to 'do his thang', and he just needed internet access and not any company resources, he would boot into his renegade windows. The point is, that attempting to deal with employee behavior through purely technical means, without serious backing from HR, often results in a cat-and-mouse game, where, at the end of the day, users who want to goof off will eventually find a way to goof off no matter what. The larger your organization, the better the chance of being one guy working there who knows IT better than the IT department does. And like I said, once he figures out a way to beat the system, he invariably tells his buddies how, who then tell their buddies how, and before you know it the situation has pretty much reverted to what it was previously. Of course, I'm of the opinion that all this employee tracking is basically bullshi* anyway. If a guy is doing good work, who really cares if he spends all his time on IM? You might say that in some jobs, it is difficult to tell who's doing a good job and who isn't. But I would respond that in such situations, it is more productive to spend your time devising a method to measure job performance rather than spending time playing Big Brother with your employees. > > Bri > > ----- Original Message ----- > From: "Jarmoc, Jeff" > To: > Sent: Friday, January 04, 2002 7:20 AM > Subject: RE: How to Block MSN ... [7:30891] > > > > > But truly the best way is to simply have company policy that bans > > messenger. > > > > Because we all know that always works, right? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31010&t=30891 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
