In my last job, for a fairly large company, there was a very strict policy. The desktop was completely locked down. It was impossible to install applications or games as no one had administrator access.
The "RUN" feature on Windows was disabled as was the Windows Explorer (not to be confused with Internet Explorer). "My Computer" was available but only showed the Network shares which each user had access to.
Email was monitored, mainly by checking for attachment size and type to prevent sharing of risque/humorous stuff. I know of one guy who was disciplined for sharing a joke cartoon. Even our manager said that he did not find it offensive but that as sending any stuff like it was prohibited....
Some mangers were able to use USB devices but the rest of us were unable to do so. The Floppy Drives (remember them
) were also disabled.
Although Internet access was allowed it was controlled. They use the MS provided kit to customise Intenet Exploder to remove many of the menu items. They also run a proxy server of some sort which stops access to certain types of web sites. Not just the obvious ones like XXX stuff, but also webmail services. One supervisor/manager did at for a while manage to bypass this and was reported for accessing porn, however, somehow his manager managed to get him off. No one to this day knows how but that was the only exception I know of. The guy was however moved to another office.
When I started there things were a lot more lax but over the years they have, as you can see, set up a pretty secure system.
Some things are still possible by connecting a laptop, for example, to the network. I know of one guy,
,
, who was asked by his manager to access the Security Camera system so that he could look at the archive footage of an accident in the car park. However all the other web browsing limits are still in place. One department,
, was able to install their own cable modem and router and gain unfettered access that way, however the manager did ask one of his engineers,
, to put some controls in place.
Sandy