Wednesday, December 5, 2012

how do I configure a gpo to restrict users from stopping the terminal services service?

Q. I am looking in the group policy management console and I cannot find a way to keep users on the domain from setting the terminal services service to manual. The problem I am running into is we have some semi Microsoft savvy software engineers that think they are doing a good thing and blocking weaknesses, the problem is when they want us to remote into their pc to fix issues we have to wait until they are at their desks to start the terminal services service.

A. Simple: Open an existing GPO or create a new one. Edit it and under Computer/Windows Security/Services set the Remote Desktop service to automatic. Further restrict it by setting who can query the service by removing the Users rights to read it. The user will not be able to change their terminal service startup. One catch is if they are able to edit the registry, they can change the startup DWORD to 4 or 2 (disabled/manual respectively). You can prevent this by blocking users from being able to use registry editing programs (GPO). Then, if they're still able to get to edit the registry, block their rights to regedit.exe and regedt32.exe (GPO). That should hold them at bay.

If that's not good enough, edit the computer configuration Computer/Windows Security/User Rights Assignment (I believe) and set the "Users that can connect to this computer via Terminal Services" to trusted users only (or none).

Finally, don't allow anyone to have local administrative rights on the computers. If you do, you're not going to be able to stop them from blocking the GPO from being applied, as they can restrict this via the registry...

WG


What are non-conventional jobs for someone with a computer science degree?
Q. Obviously, there are "traditional" jobs for people graduating with a BA in Computer Science, such as jobs as a software engineer. I'm wondering - what types of "non-traditional" jobs are there for Computer Science BAs willing to get a graduate degree, either in computer science or another field?

A. The obvious CS degree jobs are programming related but there are many other IT jobs like these:

Computer Technician - Works on computer hardware at user location or in service center. (entry level IT Job)
Service Center Coordinator - Schedules the repair of user community computers, orders spare parts, schedules staff, establishes priorities, maintains loaner laptops and non-US laptops for travel outside of US.
Help Desk Staff - answer questions and resolve problems for the user community. (entry level IT Job - Tier 1 support)
Storage Administrator - in charge of mass storage servers and devices.
Network Administrator - Works on routers, switches, hubs, cables, load balancers and all the other hardware that handles LAN and WAN network traffic. Also, may be responsible for IP phone service.
Systems Administrator or Systems Engineer- Works with servers, laptops and desktop computers to keep them free of problems and secure the data they contain. Responsible for Security group creation and memberships, server patching, anti-virus protection updates, password changes and any automated mechanisms that make these changes. These positions may be divided into server and desktop teams. Tier 2 support.
Enterprise Administrator - Handles Enterprise support and design issues. Tier 3 support.
Active Directory Administrator - Designs and administers Active Directory infrastructure, AD policies, access permissions, roles, group policies, separation of duties.
Exchange and Messaging Administrator - maintains mail systems servers, other mail related devices and the company messaging infrastructure.
Backup Administrator - Maintains backup devices and determines backup strategies so data that was deleted accidentally or intentionally can be recovered. Design and control how and when data is backed up, where the backups are stored and how long the backups are retained. They will test to be sure backups are valid and usable.
Disaster Recovery Specialist - Plans for disaster events so the company data and infrastructure can be brought back online as quickly as possible after a fire, flood, earthquake, terrorism or other disaster event. Plans for failover of services to alternate locations, if the primary location is not available.
Database Administrator - Maintains the company databases which may include customer and sales records, billing information, inventory and other data.
Computing Security Specialist - A company's biggest asset is its data and the Computing Security Specialist will work to try to keep that data protected from loss. They may be dealing with and defending against viruses, hoaxes, malware, keyloggers, phishing attacks, internal attacks and domestic and foreign intrusion. Develops monitoring and interception systems, filters and strategies and works with appropriate government agencies.
Ethical Hacker � performs intrusion and vulnerability testing of systems. Works with Computing Security to insure intrusion prevention systems are working correctly.
Corporate IT Acquisition Specialist - Works with acquired outside companies to establish migration into the corporate computing infrastructure.
Data Center Administrator - Maintains the data center facilities where the company's servers and other devices reside. They are responsible for physical security and may review badge reader and camera information to be sure that only individuals with proper access are getting close to the company's servers and other critical devices. Also, maintain backup power devices (UPS or generators).

In a small business the list of jobs above might be performed by one or two people doing all these jobs. In a large Enterprise environment this could be hundreds of people.


Computer Technician, Service Center Coordinator, Help Desk Staff, Storage Administrator, Network Administrator, Systems Administrator, Systems Engineer, Enterprise Administrator, Active Directory Administrator, Exchange and Messaging Administrator, Backup Administrator, Disaster Recovery Specialist, Database Administrator, Computing Security Specialist, Corporate IT Acquisition Specialist and Data Center Administrator, just to name a few.

In a small business the list above might be one or two people doing all these jobs. In a large Enterprise environment this could be hundreds of people.

Best wishes!


What do you think is the best brand of computers?
Q. For a desk top computer.
In terms of memory, virus protection, and all around uses.
Also needs to work for Microsoft xp.

A. It all depends on the intended useage. Thats like asking "whats the best kind of car?", it's personal preference (and to some extent advertising). I have been building and reselling computers for a very long time. Of all the manufacturers I have resold for, the best company I dealt with was Acer. They have a pretty wide range of computers and pricing, and you can still get them with Windows XP Professional. As far as a low to mid priced PC goes, that's where I would look.

If you're looking for something that will be upgradeable for the future (which most cheap PC's aren't), look into having a computer custom built.

Most OEM (HP, Dell, Acer, Gateway) computers don't come will full versions of software, you have to pay for it (extra). Don't bother getting Norton or McAfee for an antivirus, they both perform horribly and slow computers down. AVG Internet Security works VERY well, and cost half what Norton costs. Well worth the money.

For a new PC, look for Windows XP, 2GB Ram, a DVD+/-RW drive, at least 250MB hard drive. If you're looking for a complete system, get at least a 19" LCD. As for processor, if you're looking to save some money, go with an AMD Dual Core X2 5000 or better, otherwise an Intel dual core 2Ghz or better should suffice for most day to day tasks.

Hope that helps.

Jason

http://www.onestoptechnologyshop.com

Free e-mail tech support for anyone, anywhere, anytime.
techsupport@onestoptechnologyshop.com

Custom computer systems built to your specifications.
sales@onestoptechnologyshop.com

15 years in computer service and sales.


What are some good fields in Information Technology ?
Q. I am currently a junior in High School. I am interested in information technology but the field is too vast for me to pick from. I heard that software engineering is a good field to get into. What are some steps to becoming a software engineer ?

A. To give you the background � There are a number of viable IT majors. Just figure out what you would like to do. These are all good. You need a 4 year degree. If all you have time for is a 2 year degree then that is ok for starters but you will still need to complete years 3&4. Don't get a certificate type degree or a Devry or ITT Tech degree- not recognized by many employers and credits may not transfer in the future. There are several main Computer majors and their associated career categories and you need to know these just to get the lay of the land. These degree titles are often found in Associates, Bachelors and Masters degree programs. Generally most IT employers are looking for a 4 year Bachelors degree in an IT related major as a minimum requirement. For working people some of these majors are offered by schools in night classes and we are beginning to see online or hybrid online/classroom options available. Depending on the school, a Bachelors degree in an IT field may be a BA or a BS. There does not seem to be any problems for employers with a BA or BS as long as it is a bachelors degree. If you already have a degree in another major, if you have an Associates degree or if you have a bunch or college credits and no degree you can usually find a degree completion program that will allow you to take 14-16 months of classes and graduate with a Bachelors in a computer related major.
Now some of the titles colleges use may consist of different course curriculums. As an example one school may have more programming classes in the same major while another school has fewer. Schools may call their general IT program Computer Information Technology, Computer Information Systems or Computer Information Science. To really tell what the major is about you should look at the courses that a particular school offers in that major. Another point of confusion is job titles you will see. For example, I am called a Computer Systems Engineer but I don't do anything associated with Computer Engineering. One job I had I was Systems Programmer but I did not do any programming. So the titles for majors and for jobs in IT can be very confusing. Sometimes I will hear someone say they want to pursue Computer Science or Computer Engineering and once they find out what it involves they realize that is not what they want to do. If this is old info, that you already know, apologies. Here are the majors and some associated jobs:

Computer Science (CS) - A technical degree which usually has a Programming emphasis - people with this major usually are developing application software, web development, embedded code and robotics. Sometimes depending on the college the degree may cover some more general topics as listed under CIS below. CS is a difficult major and may include a number of advanced math courses. Many CS students find themselves not enjoying programming, not being gifted at it or not having the math and logic skills to be good at programming and they will switch out into CIS. CS majors that are able to graduate can also qualify for jobs listed below under CIS.

Computer Information Systems (CIS) - This may also be called a variety of other names like Information Technology (IT), Information Systems (IS), etc. This is a general technical degree and is the degree that I have. Holders of these degree work in a variety of technical jobs like these:
Computer Technician, Service Center Coordinator, Help Desk Staff, Storage Administrator, Network Administrator, Systems Administrator, Systems Engineer, Enterprise Administrator, Active Directory Administrator, Exchange and Messaging Administrator, Backup Administrator, Disaster Recovery Specialist, Database Administrator, Computing Security Specialist, Corporate IT Acquisition Specialist and Data Center Administrator, just to name a few.

Computer Engineering - This is a technical engineering and design degree. These degree holders get jobs related to designing and manufacturing computer related hardware. Obviously when you think of hardware you think of laptops and PCs but this might be all kinds of computer devices like tablets, processors, memory, storage, networking equipment and components of computers.

Management Information Systems (MIS) - This is a business degree that prepares non-technically trained people to manage projects, budgets and people. Traditionally, senior IT technical pros would eventually be promoted into management positions after years of technical work. The good news is they understood technical challenges their people were working with but the bad news was that some were great tech people but poor people managers. I have had both types of these managers and the new trend is definitely towards these non-technical managers
Hope this helps.
Best Wishes!





Powered by Yahoo! Answers

No comments:

Post a Comment