Our local IT guy is clued, but his superiors Just Don't Get It. So we have a quiet laugh together and move on. Examples: IM (AIM, Yahoo, etc) are blocked, ostensibly because of 'security concerns', but I can FTP out to *any site I want* and upload files. Or Telnet/SSH (do it all the time to my home server).
The latter opens up some creative possibilities - a SSH tunnel proxy/redirect is not hard to accomplish, if I truly wanted chat capability, for example. :)
Floppy drives are not disabled. I can slot a drive in the USB port and go to town (hardware installs not disabled). The run command is disabled, as is direct access via Explorer, so at least they're trying, I suppose.
Oh, and while I'm at it: all the machines I've seen don't have BIOS passwords and by default are set to boot from CD, then floppy, THEN HD.
To be fair, external security is very, very good. But internally... hah!
--sofaspud
-- |
