Linked by Thom Holwerda on Wed 1st Nov 2006 14:55 UTC, submitted by bouh
Internet & Networking "How do the latest versions of each browser compare? For this prizefight, we looked at Microsoft Internet Explorer 7, Microsoft's first new Internet browser since 2001 and Mozilla Firefox 2, Mozilla's update of its popular Firefox 1.5 browser released in November 2005." This will be the last Firefox 2 vs. IE7 article. I promise.
Thread beginning with comment 177763
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[6]: Group Policies
by Ventajou on Thu 2nd Nov 2006 01:03 UTC in reply to "RE[4]: Group Policies"
Ventajou
Member since:
2006-10-31

I agree with you.

My point though was that adding GP support to FF would help speed its adoption in larger organisations where administrators want to be able to easily manage settings on hundreds of systems.

The example I provided was just that, an example.

I definitely do not consider GP as the main tool to keep an environment secure. But it can help prevent users from, whether intentionally or not, messing up a system. There will always be a way to go around security measures, but it's not a reason to make it easier.

In addition, you sometimes have to face financial and/or political reasons as to why you can't simply have a better firewall. Or it could be that the guy in charge of it is just a moron and doesn't get what you're trying to explain. And so you have to do what you can at your level.

Reply Parent Score: 1

RE[7]: Group Policies
by hal2k1 on Thu 2nd Nov 2006 01:17 in reply to "RE[6]: Group Policies"
hal2k1 Member since:
2005-11-11

//I definitely do not consider GP as the main tool to keep an environment secure. But it can help prevent users from, whether intentionally or not, messing up a system. There will always be a way to go around security measures, but it's not a reason to make it easier.

In addition, you sometimes have to face financial and/or political reasons as to why you can't simply have a better firewall. Or it could be that the guy in charge of it is just a moron and doesn't get what you're trying to explain. And so you have to do what you can at your level.//

The point is that "group policies" are useless for the purpose to which you are trying to put them. On Windows systems, people are able to run whatever they want to.

The only way to do what you are trying to do is to have a better firewall. Make it so that the ONLY way any machine on your network can get connected to the Internet is through your firewall. Once you have done that, then setting proxies on client machines won't do anything.

Your reason for preferring IE over Firefox is not a valid reason at all.

Reply Parent Score: 1

RE[8]: Group Policies
by Ventajou on Thu 2nd Nov 2006 22:14 in reply to "RE[7]: Group Policies"
Ventajou Member since:
2006-10-31

On Windows systems, people are able to run whatever you will let them run. It is possible to lock down a system so that very little can be done. And all you need for that is actually user permissions and group policies.

I am not talking here about a home network or a small organisation with a dozen systems or so, each managed individually. I am talking about a couple thousand computers.

Group policies are not useless for my purpose because my purpose is to lock down a number of settings to a standard through my organisation. You are focusing on the example I provided but somebody could also accidently (or not) change a setting which prevents them and others from using their browser properly.

Another example is if one of the users who is allowed to install applications on their system downloads the latest acrobat reader which comes with a toolbar. Well with group policies I can prevent that toolbar from running in IE. I can't though prevent someone from installing an extension in FF.

There is no unique solution to network security, otherwise you would simply have one settings screen somewhere with one checkbox saying "make my network secure". Unfortunately it doesn't work like that and one has to adapt their solution to the environment they design it for. This is why you can actually choose which ports your firewall leaves open for example.

Reply Parent Score: 1