Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 3 down vote favorite
1

Recently, we found our users install GoToMyPC and Teamviewer on their workstations. What is the standard approach to block users' personal use of remote desktop control?

share|improve this question
For what it's worth, GotoMyPc can use a Java launcher, and if Java is installed that may cause some unwanted headaches. – makerofthings7 Nov 18 '12 at 23:05
1  
I personally am a fan of getting users to understand the consequences, rather than plainly blocking it. Blocking limits people, policies and clear consequences should prevent people from doing it if you can trust them. They work with or for you, you should be able to trust them enough. Also you should be able to convince them why they shouldn't, or else you might want to question if it's a good idea to block it. – Luc Nov 19 '12 at 0:45
@user15580 - Filter it at the network level. What network tools do you have to filter any website? – Ramhound Nov 19 '12 at 16:44

3 Answers

up vote 4 down vote

There's a few options here:

  • Force users through a web proxy set to block remote desktop applications
  • Block the IP addresses of popular remote desktop applications. These protocols use https to connect, so you can't filter on port. You either have to make group with all the IPs, or filter on their DNS entries if your firewall supports it
  • Prevent users from being able to download and run the applets the sites use. That will prevent them from being able to use the sites
share|improve this answer
up vote 1 down vote

Apart from GdD suggestions:

There are many ways, first of all use GPO rules in windows to prevent your users to install their own software. You can also use Symantec Altiris to log all executions of all exe's. You can then analyze these logs to see if anyone used teamviewer or any other remote desktop tool.

Apart from blocking, you should also educate and train your users. You need to make your users aware that these pieces of software can be dangerous.

share|improve this answer
up vote 1 down vote

I have used (Symantec) Antivirus security applications in the past that manage workstations from a central location. You can deny certain applications from running on the workstations by creating a simple rule that is enabled on all workstations with that client software.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.