Tech Tips, Security & Compliance

I put this on the Altiris Forums a little while ago, but thought it might be useful to place here too.

The link below describes half-a-dozen security vulnerabilities which appear to be only fixed by UPGRADING to DS 6.9 plus the hotfixes www.symantec.com/avcenter/security. Here are the steps I took to remedy the problem.

I have been tasked with locking down our Macintosh workstations. The only goal so far has been to set a screen saver idle time and to require a password to wake the computer from sleep or screen saver.

Trying to audit with a rule that must iterate through all user profiles who have logged in to Windows?

Here's a tip that should make your day.

If you are looking to deploy Symantec Endpoint Protection (SEP) in your environment, there are a few pointers to make it work better in the initial rollout.

These steps are what I would call "critical" in an organization with more than one global policy for their computers.

Ever wondered how you automatically notify the user that a managed password (typically the Administrator account) has been accessed by an administrator when using Local Security Solution? No Notification Policy exists by default.

Learn how to install just such a Notification Policy in this tip.

In our organization we have some very security sensitive managers, one of whom was wholeheartedly for Local Security Solution (LSS). However, he quickly became concerned that passwords, after being disclosed, were opening security holes. While limited to those computers, he was still concerned enough and he has enough pull to have this issue block our full implementation of Local Security Solution. Therefore, it quickly became important to address his issues. Instead of upping our password reset interval for everyone, I came up with the idea of just reseting those passwords that had been disclosed.