Martin Zugec

For some stuff (start menu, desktop etc.) I am using USMT in my company... There is also GUI tool in Windows XP to migrate this settings...

BTW are you people comparing Linux vs. Windows OR userfriendlyness of these OSs?

Well, I dont think so there is any quality antispyware for 9x... Product that covers your requirements are for w2k/xp - Microsoft AntiSpyware, Sunbelt CounterSpy.... The best idea is IMHO installing MS AS + setting SAFER restrictions...

Jedi: ZUGMA REKOS Nerd: Francis, the VIsual Basic Prodigy

Dont you have headaches or are not you eyes on burn? This was the biggest problem with older goggles

Many Windows is component/object based OS, so even if you dont use IE, you use its objects. So arguments like I dont need it, because I use FF are not good. Microsoft will allow enabling/disabling access (similar to OEAccess in unattended) with replacing stubpath with Firefox (or othe browser).

I am looking for advanced dropper, not fragmented spyware sites... E.g. visit one site, download dropper and in few minutes/hours you got system full of spyware.

Well, there are two locations where it could be - Default user or in registry StubPath...

Hi! I need to know some addresses of spyware infected sites for research purposes - dont you know any? Post it here or PM me, it is quite urgent - I will need to publish this research after this weekend Thx

I am using Windows Firewall in XPSP2. For my purposes it is absolutely ideas. I got catastrophic scenarios - for example if there would be attack on our company or new destructive virus, few persons have "red button", that will lock down every workstation on network. Also for mobile users scenarios it is great - domain and standart profile is working great! For protecting whole network perimeter I got few HW FWs and proxy with AV. Also IDS/IPS. The best protection against viruses is protected mail server - blocking dangerous attachments (exe, vbs etc.) is in my personal opinion step one in protection. Also AV of course - ideally different AV from that deployed on workstations...

Well, first you must divide network to intra and DMZ. In DMZ only Windows stuff is ISA server for Exchange - OWA etc... In Intra I got divided server with pre-set aliases, for example company ARC have every server with name ARCServer-function_of_server, e.g. ARCServer-Exchange. The "-" symbol is for parsing purposes, e.g. If first token is equal ARCServer, it is in group servers and second token identifies server. If first token is ARC, second is workstation alias. For example ARC-001, ARC-002 etc... I also use different names for locations, for locality Prague is PR-001, PR-002, locality Brno is BR-001, BR-002 etc... So I can use "testing" localities - when I created new script, I can try it first on one locality, e.g. If token 1 not equal to PR, skip. For another infrastructure, of course I am using AD + DNS, RAS is not implemented (I had callbacks, now I am on VPNs from CheckPoint). For File&Print servers (and Exchange of course) I am using clusters. I also have deployment server for distribution purposes, in fact I got three - one is data storage, second is production server and last is testing server. When testing server becomes better (performance, stability...), they switch their roles, so I am switching servers every few months.

It is not ment as professional protection, just protection against common users...

2indianarchie: Well, for me it is simple - I use Xbox Media Center

AFAIK it is not creation, it is registration of advertised per-user feature from cached MSI...

2Achdine: I agree I dont use protection at all (well, I do - my installations are on network with restricted access). But some people like it as you can see... 2rikgale: You cant just use "restrict.vbs". You must use interpreter, so it will be "cscript //nologo restrict.vbs"

Yes, thats it. Install the whole package on your PC (RK is must-have) - then just copy robocopy out of the package (you dont need to install)... I am usually (if it is possible in your scenario) placing robocopy to network and calling it from there.

Hmmm, I would suggest to check your application - it looks like application specific account

It will synchronize these folders...

2BlueMe: Maybe it should be request for administrator/moderator here... 2Brandon: You can try it

It depends... What kind of server, what for? I am using ONLY MS servers for intranet and ONLY linux server for DMZ.

Psloggedon from www.sysinternals.com (part of pstools)

Why not running that cmd (you mean console command?) directly?

2Unforgiven: I got xbox for RPG games specially Not only Fable, but also KOTOR 1 & 2 or Jade Empire...

True, mobile users are different category. Longhorn IS revolution - kernel dont need include major changes (since NT), the importing stuff is above kernel - for me personally it is monad for management purposes, with specially designed cmdlets for server components... EDIT: It is the same like comparison with other MS products - Xbox use NT kernel, XP Embedded use NT kernel, smartphones use IMHO NT kernel...

2BlueMe: One request, copy that script to first page of this thread please.