RE: Non-corp desktops and RDS

2013-02-17 Thread James Hill
+1.  It comes with 2008 and above, is easy to setup and it just works.

 

I find it difficult to find any reason to provide vpn access for home users 
when a thin approach like RD Gateway is available.

 

James.

 

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Saturday, 16 February 2013 1:50 AM
To: NT System Admin Issues
Subject: Re: Non-corp desktops and RDS

 

Instead of RDP over VPN, have you looked at RD Gateway?  It does require 
terminal server licences for the users, but eliminates the kind of issues 
you're describing by tunneling only RDP over SSL and nothing else.

 

On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim kennedy...@elyriaschools.org 
mailto:kennedy...@elyriaschools.org  wrote:

How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com 
mailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com 
mailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Non-corp desktops and RDS

2013-02-15 Thread kz20fl
Sounds like a good UAT period is needed to iron out the app inconsistencies.

Its all about the apps. Apps apps apps. If your user base doesn't have 
well-defined application needs and they customize their own desktops, then 
maybe VDI is more suited than published resources from RDS?

--Original Message--
From: Kennedy, Jim
To: NT System Admin Issues
ReplyTo: NT System Admin Issues
Subject: Non-corp desktops and RDS
Sent: 15 Feb 2013 15:03

How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Sent from my Blackberry, which may be an antique but delivers email RELIABLY
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Non-corp desktops and RDS

2013-02-15 Thread Candee
We have just now started looking into this.
We saw a demo of Aventail, and were quite impressed.
We have a few more demos set up, but so far this one was the only
outstanding one.

On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

 How well is allowing non-corporate assets connect to a RDS session from
 home working for everyone. Using an SSL tunnel here. I am just starting
 initial testing with a few users and it is a nightmare.  Wrong Java,
 toolbars and popup blockers and layers and layers of crapware are causing
 tons of problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Non-corp desktops and RDS

2013-02-15 Thread Guyer, Don
Best thing to do, if possible and backed by everyone, is to give everyone 
laptops and write up a policy that non-corp owned devices are not supported.

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.



-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Friday, February 15, 2013 10:03 AM
To: NT System Admin Issues
Subject: Non-corp desktops and RDS

How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any attachments is the
property of Catholic Health East and is intended
for the sole use of the intended recipient(s). 
It may contain information that is privileged and
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are
not the intended recipient, please delete this message, and
reply to the sender regarding the error in a separate email.
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Non-corp desktops and RDS

2013-02-15 Thread Richard Stovall
Instead of RDP over VPN, have you looked at RD Gateway?  It does require
terminal server licences for the users, but eliminates the kind of issues
you're describing by tunneling only RDP over SSL and nothing else.


On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

 How well is allowing non-corporate assets connect to a RDS session from
 home working for everyone. Using an SSL tunnel here. I am just starting
 initial testing with a few users and it is a nightmare.  Wrong Java,
 toolbars and popup blockers and layers and layers of crapware are causing
 tons of problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Non-corp desktops and RDS

2013-02-15 Thread Richard McClary
+1!

Once things like PCI compliance require 2-factor authentication, there are 
things about company-issued hardware (MAC addresses, installed certificates, 
etc) which work as one of the factors.  Multiple passwords are NOT multi-factor 
for PCI.


-Original Message-
From: Guyer, Don [mailto:dgu...@che.org] 
Sent: Friday, February 15, 2013 9:28 AM
To: NT System Admin Issues
Subject: RE: Non-corp desktops and RDS

Best thing to do, if possible and backed by everyone, is to give everyone 
laptops and write up a policy that non-corp owned devices are not supported.

Regards,

Don Guyer
Catholic Health East - Information Technology Enterprise Directory  Messaging 
Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate 
assistance, please open a Service Desk ticket or call the helpdesk @ 
610-492-3839.



-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Friday, February 15, 2013 10:03 AM
To: NT System Admin Issues
Subject: Non-corp desktops and RDS

How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any attachments is the property of Catholic Health East 
and is intended for the sole use of the intended recipient(s). 
It may contain information that is privileged and confidential.  Any 
unauthorized review, use, disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and reply to the sender 
regarding the error in a separate email.
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is 
intended only for use by the addressee(s) named herein and may contain legally 
privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Non-corp desktops and RDS

2013-02-15 Thread Kennedy, Jim
I will give that a try. I have RDS User licenses galore. We use them in labs.

From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Friday, February 15, 2013 11:18 AM
To: NT System Admin Issues
Subject: Re: Non-corp desktops and RDS

Instead of RDP over VPN, have you looked at RD Gateway?  It does require 
terminal server licences for the users, but eliminates the kind of issues 
you're describing by tunneling only RDP over SSL and nothing else.

On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Non-corp desktops and RDS

2013-02-15 Thread kz20fl
Ah right, I thought you meant app issues on the RDS end :-) my bad for not 
reading thoroughly

Sent from my Blackberry, which may be an antique but delivers email RELIABLY

-Original Message-
From: Richard Stovall rich...@gmail.com
Date: Fri, 15 Feb 2013 10:49:58 
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
Reply-To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.comSubject: Re: Non-corp desktops and RDS

Instead of RDP over VPN, have you looked at RD Gateway?  It does require
terminal server licences for the users, but eliminates the kind of issues
you're describing by tunneling only RDP over SSL and nothing else.


On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

 How well is allowing non-corporate assets connect to a RDS session from
 home working for everyone. Using an SSL tunnel here. I am just starting
 initial testing with a few users and it is a nightmare.  Wrong Java,
 toolbars and popup blockers and layers and layers of crapware are causing
 tons of problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Non-corp desktops and RDS

2013-02-15 Thread Ben M. Schorr
Multiple passwords are not multi-factor for anybody. :-)

Ben M. Schorr
Chief Executive Officer
Roland Schorr  Tower
www.rolandschorr.com

-Original Message-
From: Richard McClary [mailto:richard.mccl...@aspca.org] 
Sent: Friday, February 15, 2013 9:07 AM
To: NT System Admin Issues
Subject: RE: Non-corp desktops and RDS

+1!

Once things like PCI compliance require 2-factor authentication, there are 
things about company-issued hardware (MAC addresses, installed certificates, 
etc) which work as one of the factors.  Multiple passwords are NOT multi-factor 
for PCI.


-Original Message-
From: Guyer, Don [mailto:dgu...@che.org]
Sent: Friday, February 15, 2013 9:28 AM
To: NT System Admin Issues
Subject: RE: Non-corp desktops and RDS

Best thing to do, if possible and backed by everyone, is to give everyone 
laptops and write up a policy that non-corp owned devices are not supported.

Regards,

Don Guyer
Catholic Health East - Information Technology Enterprise Directory  Messaging 
Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate 
assistance, please open a Service Desk ticket or call the helpdesk @ 
610-492-3839.



-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Friday, February 15, 2013 10:03 AM
To: NT System Admin Issues
Subject: Non-corp desktops and RDS

How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any attachments is the property of Catholic Health East 
and is intended for the sole use of the intended recipient(s). 
It may contain information that is privileged and confidential.  Any 
unauthorized review, use, disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and reply to the sender 
regarding the error in a separate email.
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is 
intended only for use by the addressee(s) named herein and may contain legally 
privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Non-corp desktops and RDS

2013-02-15 Thread Kennedy, Jim
We are getting that proposal on the 22nd from a reliable vendor.  The price tag 
will kill that portion of it, we just did 3 million in cuts yesterday. 60+ 
people out the door at the end of the school year. You bring up a valid point 
in a backhanded way.  The choices are write the check and do it correctly. Or 
have something that doesn't work too well.

Frustrating though. Any reasonably clean/patched/well maintained machine 
connects and functions perfectly.


From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, February 15, 2013 11:30 AM
To: NT System Admin Issues
Subject: Re: Non-corp desktops and RDS

I would recommend that you take the results of the testing, look at vendors 
that will help you with the security of such an approach, and then propose the 
full approach (with a suitable timeframe) for approval.

If you're fortunate, they'll approve the project with the proper tools.  If 
you're really fortunate, they'll kill it for now.   Either way, make sure 
you've researched the tools that you will need beforehand.






ASB
http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker
Providing Virtual CIO Services (IT Operations  Information Security) for the 
SMB market...




On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
How well is allowing non-corporate assets connect to a RDS session from home 
working for everyone. Using an SSL tunnel here. I am just starting initial 
testing with a few users and it is a nightmare.  Wrong Java, toolbars and popup 
blockers and layers and layers of crapware are causing tons of problems. And 
these are the alleged 'tech savy' users.

It is beginning to feel like a giant fail coming my way.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Non-corp desktops and RDS

2013-02-15 Thread Andrew S. Baker
*Frustrating though. Any reasonably clean/patched/well maintained machine
connects and functions perfectly.*

**

I wouldn't be too quick to mention that, as that will become your new
mission...





*ASB
**http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker*
**Providing Virtual CIO Services (IT Operations  Information Security) for
the SMB market…***





On Fri, Feb 15, 2013 at 11:33 AM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

  We are getting that proposal on the 22nd from a reliable vendor.  The
 price tag will kill that portion of it, we just did 3 million in cuts
 yesterday. 60+ people out the door at the end of the school year. You bring
 up a valid point in a backhanded way.  The choices are write the check and
 do it correctly. Or have something that doesn’t work too well.

 ** **

 Frustrating though. Any reasonably clean/patched/well maintained machine
 connects and functions perfectly.

 ** **

 ** **

 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Friday, February 15, 2013 11:30 AM

 *To:* NT System Admin Issues
 *Subject:* Re: Non-corp desktops and RDS

 ** **

 I would recommend that you take the results of the testing, look at
 vendors that will help you with the security of such an approach, and then
 propose the full approach (with a suitable timeframe) for approval.

 ** **

 If you're fortunate, they'll approve the project with the proper tools.
  If you're really fortunate, they'll kill it for now.   Either way, make
 sure you've researched the tools that you will need beforehand.  


 

  

  

 *ASB
 **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker*
 **Providing Virtual CIO Services (IT Operations  Information Security)
 for the SMB market…*

  

 ** **

 On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim 
 kennedy...@elyriaschools.org wrote:

 How well is allowing non-corporate assets connect to a RDS session from
 home working for everyone. Using an SSL tunnel here. I am just starting
 initial testing with a few users and it is a nightmare.  Wrong Java,
 toolbars and popup blockers and layers and layers of crapware are causing
 tons of problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ** **

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Non-corp desktops and RDS

2013-02-15 Thread Kurt Buff
On Fri, Feb 15, 2013 at 7:03 AM, Kennedy, Jim
kennedy...@elyriaschools.org wrote:
 How well is allowing non-corporate assets connect to a RDS session from home 
 working for everyone. Using an SSL tunnel here. I am just starting initial 
 testing with a few users and it is a nightmare.  Wrong Java, toolbars and 
 popup blockers and layers and layers of crapware are causing tons of 
 problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

We're doing fine with it - we have an Aventail EX series box, and it
checks for a suitable antivirus client on the connecting machine.

We've seen some problems with getting the client installed on user
machines, but have worked around that by giving them a download link
to the client install package directly, on our ftp server.

Other than that, if they can't connect, it's their problem, though a
few people have brought their machines in for help.

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Non-corp desktops and RDS

2013-02-15 Thread Kurt Buff
I definitely agree, but I was overruled on that...

Kurt

On Fri, Feb 15, 2013 at 7:27 AM, Guyer, Don dgu...@che.org wrote:
 Best thing to do, if possible and backed by everyone, is to give everyone 
 laptops and write up a policy that non-corp owned devices are not supported.

 Regards,

 Don Guyer
 Catholic Health East - Information Technology
 Enterprise Directory  Messaging Services
 3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
 email: dgu...@che.org
 Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
 For immediate assistance, please open a Service Desk ticket or call the 
 helpdesk @ 610-492-3839.



 -Original Message-
 From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
 Sent: Friday, February 15, 2013 10:03 AM
 To: NT System Admin Issues
 Subject: Non-corp desktops and RDS

 How well is allowing non-corporate assets connect to a RDS session from home 
 working for everyone. Using an SSL tunnel here. I am just starting initial 
 testing with a few users and it is a nightmare.  Wrong Java, toolbars and 
 popup blockers and layers and layers of crapware are causing tons of 
 problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 Confidentiality Notice:
 This e-mail, including any attachments is the
 property of Catholic Health East and is intended
 for the sole use of the intended recipient(s).
 It may contain information that is privileged and
 confidential.  Any unauthorized review, use,
 disclosure, or distribution is prohibited. If you are
 not the intended recipient, please delete this message, and
 reply to the sender regarding the error in a separate email.


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Non-corp desktops and RDS

2013-02-15 Thread Kurt Buff
The EX series of Aventail (Was Sonicall, now Dell) is indeed very nice.

I like our a lot.

Kurt

On Fri, Feb 15, 2013 at 7:21 AM, Candee can...@gmail.com wrote:
 We have just now started looking into this.
 We saw a demo of Aventail, and were quite impressed.
 We have a few more demos set up, but so far this one was the only
 outstanding one.

 On Fri, Feb 15, 2013 at 10:03 AM, Kennedy, Jim
 kennedy...@elyriaschools.org wrote:

 How well is allowing non-corporate assets connect to a RDS session from
 home working for everyone. Using an SSL tunnel here. I am just starting
 initial testing with a few users and it is a nightmare.  Wrong Java,
 toolbars and popup blockers and layers and layers of crapware are causing
 tons of problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Non-corp desktops and RDS

2013-02-15 Thread Guyer, Don
I was so happy the first time they told me about that policy, as well as no 
MAC support either. Although, I wouldn't be involved with any of that hardly at 
all, it still made me happy.

: )

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, February 15, 2013 2:13 PM
To: NT System Admin Issues
Subject: Re: Non-corp desktops and RDS

I definitely agree, but I was overruled on that...

Kurt

On Fri, Feb 15, 2013 at 7:27 AM, Guyer, Don dgu...@che.org wrote:
 Best thing to do, if possible and backed by everyone, is to give everyone 
 laptops and write up a policy that non-corp owned devices are not supported.

 Regards,

 Don Guyer
 Catholic Health East - Information Technology Enterprise Directory  
 Messaging Services
 3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
 email: dgu...@che.org
 Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For 
 immediate assistance, please open a Service Desk ticket or call the helpdesk 
 @ 610-492-3839.



 -Original Message-
 From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
 Sent: Friday, February 15, 2013 10:03 AM
 To: NT System Admin Issues
 Subject: Non-corp desktops and RDS

 How well is allowing non-corporate assets connect to a RDS session from home 
 working for everyone. Using an SSL tunnel here. I am just starting initial 
 testing with a few users and it is a nightmare.  Wrong Java, toolbars and 
 popup blockers and layers and layers of crapware are causing tons of 
 problems. And these are the alleged 'tech savy' users.

 It is beginning to feel like a giant fail coming my way.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 Confidentiality Notice:
 This e-mail, including any attachments is the property of Catholic 
 Health East and is intended for the sole use of the intended 
 recipient(s).
 It may contain information that is privileged and confidential.  Any 
 unauthorized review, use, disclosure, or distribution is prohibited. 
 If you are not the intended recipient, please delete this message, and 
 reply to the sender regarding the error in a separate email.


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any attachments is the 
property of Catholic Health East and is intended 
for the sole use of the intended recipient(s).  
It may contain information that is privileged and 
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and 
reply to the sender regarding the error in a separate email.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin