Moble Device Secuirty

[Sbrown95]

Environment: 100% Windows XP Professional, Windows Server 2003 Active
Directory. All users have Standard limited User Accounts.

NO we do not use windows Vista, YES i WISH we did, but it will take at
least another year of testing for it to get approved for onsite use.

What are you guys doing for the user that needs to take his laptop on
the road and install devices (projectors, printers, etc) and config
network settings,etc - yet still limit account access when domain
connected??

I have been tasked with coming up with a solution for devices that can
be used both offsite and onsite. This is a first for us. Currently
users with laptops are not allowed to connect them to our corporate
network (they use citrix from public locations and corporate desktops
when here at work).


We are getting requests from upper management to allow them to connect
their laptops to a docking station here at work and relinquish the
desktop.

This now presents the problem: How do we allow the user to securely
connect to our domain with a limited/restricted user account, yet
still allow them to perform necessary tasks while on the road??

Since this is a new scenario for us we are looking for ANY input you
guys can offer on what you are doing in similar situations.

I appreciate ANY INPUT you guys can offer. Thanks!

 

[Pavel A.]

Create a local administrator account on the laptops.
It will allow them to manage their laptops offsite.
Also, have a look at Vmware ACE. They can use
a provisioned virtual machine to access the corp net.
Plus, certain measures against laptop cheft,
that you should already have in place.

Regards,
--PA

 

[Sbrown95]

Thanks for the info!

Funny you mentioned Vmware ACE because that's the original product we
were looking at using for this solution. They support sucks and we
were never able to get the environment at 100% so we are going back to
the basics.

I was told by a VM Partner that they are dropping the ACE product and
that's why the support is so lacking.

 

[Pavel A.]

Thanks for the info!

Funny you mentioned Vmware ACE because that's the original product we
were looking at using for this solution. They support sucks and we
were never able to get the environment at 100% so we are going back to
the basics.

I was told by a VM Partner that they are dropping the ACE product and
that's why the support is so lacking.

Very interesting, thanks for the info.

--PA

 

[Anteaus]

http://mylogon.net

Might offer some advantages over the domain model for mobile users.