Hi,

time for the daily rant.

Why oh why can't something that should be a "virus scanner" just do 
exactly *that*, and not "break everything else on this machine, just to
make it fully secure!"?

Have a nice network with Win7 clients and a Server 2008 as AD DC.  All
works.

$Supplier recommends to use F-Secure whateveritiscalled for antivirus,
so $customer buys that.

$Supplier sets up F-Secure Damagement Console on the Server (OK) and
rolls out clients to the PCs (so far, ok).

Then all hell breaks loose.

Built-in firewall breaks logon to the DC, even though "all outgoing 
connections are permitted!" is checked in the firewall rules.

Built-in "Browser Protection" completely breaks all browsers, and while
at it, the local Gimp installation.  But only for some of the users
(all machines are identical and so are the user profiles).

Two of the machines don't even *start* anymore.


*sigh*

But indeed, the chance that a virus can be introduced into this network
now is pretty low.  So "mission accomplished", no?

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Reply via email to