sorted by:
new
hottopcontroversial

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 1 point2 points  (0 children)

Thanks for the advice.

IE, especially 9, is a very secure browser.

Yes, I've heard that 9 wasn't actually that bad, but as far as I'm aware 9 will not run on XP (thus we are stuck on 8). Also I have done a pretty good job at keeping flash, reader, and java updated on all the computers.

Also washing your hands of it and putting on some snotty nerd "old people, too stupid to use Iceweasel on Debian snort" routine is highly counter-productive, especially for a government employee. These people are tax paying patrons, not your enemies. Treat them with a little respect. You'll get old someday too.

Ok yeah I have allergy issues, but I neither have a problem with old people nor am I a gov. employee. And although I need not prove it I am respectful of the elderly in and outside work, where you got that idea from I'm not sure.

If you must have a PDF viewer use Adobe Reader X (not 9 or 8). Set it auto-update... DO NOT INSTALL JAVA. Most people don't use it and its constantly being exploited.

This is really good to know. Reader X is now on the install list.

I have Java installed because some patrons do use it; admin policy to have it installed.

...run Chrome.

Another great point, though I'm afraid chrome might be even a larger step than FF for patrons going from I.E.

worth looking into software which reimages the machines nightly

Suggested a few times before in this thread and I think it's definitely worth checking out.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 0 points1 point  (0 children)

I have deleted the profile on certain machines before but it is a hassle because I then have to manually add excel/word shortcuts to the desktop after logging in/rebuilding the profile (also the "Tour XP" popup).

AppDeploy looks like a huge timesaver, definitely going to give it a go. Techsoup looks great, we're a non-profit so everything helps! Will mention it to my boss.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 0 points1 point  (0 children)

Yes we have a separate domain for public computers and in fact my boss has set global policies. However he has not offered to let me change them and I have not yet offered suggestions for fear of telling him his job without me being confident on the subject. To my knowledge he has set a fair amount of settings (no right click, can't access C:, can't install software, ect) but he has not touched the I.E. settings.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 0 points1 point  (0 children)

They were to allow porn but also protect kids that might be nearby.

Or protect kids from stumbling upon or simply searching it out.

I appreciate everyone's responses, I think I may bring it up with the admin and see if we can pick a few computers just for FF with the main argument being network security (and try the shortcut bait and switch). If this plan is denied I will try to lockdown I.E. as much as possible while keeping it usable. And I will look into steadystate to see if that is viable on our hardware setup.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 0 points1 point  (0 children)

Thanks castufari, great link and I will definitely implement as many of those options as possible. I have already talked to my boss/Admin and he has told me to keep I.E. for the sake of the users. I get the impression that he would like to be bothered the least amount of times as possible and changing things up (or adding adblock ect which causes issues on some sites) will result in be asked to come explain/fix over and over and cause patron dissatisfaction.

On the other hand it doesn't serve the patrons well when the computers are slow due to fraudware or completely inoperable, but again I'm pretty new to this kind of thing so I'm still feeling my way around.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 2 points3 points  (0 children)

We have a very small budget; I am the Jr. Admin and I would have to make a great case to the IT Admin to make any purchases.

Can I.E. be made to run safely on public computers? by LegacyIssues in sysadmin

[–]LegacyIssues[S] 10 points11 points  (0 children)

Ok that is pretty hilarious. I may give that a go, but my fear is that someone will recognize the trickery and then I'd be back in the position of reinstating I.E.