Security

If you plan to use Kerberos authentication yet are not familiar with nor own the Microsoft Active Directory infrastructure in your environment, share this article with those who do manage that environment. You will need their assistance to be successful, especially since some of the steps will require directory administrator rights to complete.

I put this on the Altiris Forums a little while ago, but thought it might be useful to place here too.

The link below describes half-a-dozen security vulnerabilities which appear to be only fixed by UPGRADING to DS 6.9 plus the hotfixes www.symantec.com/avcenter/security. Here are the steps I took to remedy the problem.

There are multiple exploits, or vulnerabilities, in Altiris' Deployment Solution software that have recently been discovered by Brett Moore of Insomnia Security and Alex Hernandez of Syb Security. The vulnerability is considered as an elevation of privileges vulnerability and is classified as moderate severity to highly critical.

Access to certain files and shares are required in order for NS Clients to communicate effectively with Notification Server. When Notification Server is installed, default security settings are used. Depending on your needs, you may need to make changes to your security settings. This article discusses the minimum file and share permissions that are needed for Notification Server to work. It also discusses system and network access needed by Notification Server resources. This will help you in deciding how best to provide security while allowing Notification Server to do perform effectively.

Many people are worried about whether their antivirus, firewall and antispyware software will protect them against the viruses, trojans, keyloggers and spyware increasing more than ever in today's Internet.

Here's an easy way to drastically reduce the amount of malware getting onto your PC and totally stopping any chance they have of running at startup. I'm also talking about unknown malware that hasn't been identified yet.

The ability to provide access to the Real-Time tab of Resource Manager will enable administrators to provide this valuable tool to IT specialists or Helpdesk workers. Furthermore the ability to configure access to certain functions within the console will allow administrators to grant or restrict what users can do with Real-Time System Manager. This includes WMI functionality as well as powerful AMT functionality.

I have been tasked with locking down our Macintosh workstations. The only goal so far has been to set a screen saver idle time and to require a password to wake the computer from sleep or screen saver.

If you enjoyed the iPhone console prototype, we would be interested in learning more about your mobile device management needs.

Click here to take a short survey.