IS Decisions' Blog

Jan 28

How to deploy Firefox on thousands of Windows workstations in 7 easy steps with RemoteExec

RemoteExec description

Firefox LogoMozilla Firefox is a free and open source web browser descended from the Mozilla Application Suite and managed by Mozilla Corporation. The latest Firefox features include tabbed browsing, spell checking, incremental find, live bookmarking, a download manager, private browsing and location-aware browsing.
Source: Wikipedia

How to deploy Firefox

  1. Download the latest Firefox version from: http://www.mozilla.com
  2. Open RemoteExec and go to Remote Jobs/New Remote Job/File execution through the Configuration tree.
    RemoteExec configuration tree
  3. In the first section «Settings», browse the File field to the setup file previously downloaded. Firefox settings
  4. By default, Firefox setup is not a silent package. The argument to make it silent is indicated in the Mozilla help resources: «-ms». Fill in the Argument(s) field with «–ms».
  5. Set the Context to Administrative and keep the Auto option checked. RemoteExec will then optimize the remote execution.
  6. Go to Target Computers section and select the computers on which you want to install FireFox.
    RemoteExec computer browser
  7. You can now start your deployment by clicking on Launch. The Progress window will pop in a new tab allowing you to follow the remote execution process.

Dec 13

Parlez de RemoteExec 5.0 sur Twitter et/ou LinkedIn et/ou Viadeo et gagnez un Dell Inspiron Duo

IS Decisions vient d’annoncer la sortie de RemoteExec 5.0 pour Windows, une solution logicielle 100% sans agent, permettant aux professionnels de l’informatique de déployer packages MSI et correctifs, d’exécuter à distance programmes et scripts, de gérer à distance leurs configurations Windows, etc.

Vous avez un profil Twitter et/ou LinkedIn et/ou Viadeo ? Aidez-nous à faire connaître RemoteExec 5.0 et gagnez un Dell Inspiron Duo !
Dell Inspiron Duo
Pour cela, rien de plus simple :


Vous êtes sur Twitter

Vous êtes sur Twitter :



  1. Suivez @IS_Decisions
  2. Postez le tweet ci-dessous avant le 31 janvier 2011
    RT @IS_Decisions RemoteExec 5.0 pour Windows est disponible ! Déploiements, exécutions à distance et +. Téléchargez-le :http://ow.ly/3odBU
  3. Envoyez l’URL de votre profil Twitter par Email à RE.twitter@isdecisions.com




Vous êtes sur LinkedIn

Vous êtes sur LinkedIn



  1. Suivez IS Decisions
  2. Partagez l’update ci-dessous avant le 31 janvier 2011
    RemoteExec 5.0 est disponible et permet aux ITpros d’effectuer des déploiements et d’exécuter des programmes à distance sur un réseau Windows d’entreprise
    en attachant le lien suivant :
    http://www.isdecisions.com/fr/logiciels/remoteexec/
  3. Envoyez l’URL de votre profil public LinkedIn par Email à RE.linkedin@isdecisions.com




Vous êtes sur Viadeo

Vous êtes sur Viadeo



  1. Postez la « mini news » (Quoi de neuf ?) ci-dessous avant le 31 janvier 2011
    RemoteExec 5.0 est disponible et permet aux ITpros d’effectuer des déploiements et d’exécuter des programmes à distance sur un réseau Windows d’entreprise
    avec le lien suivant :
    http://www.isdecisions.com/fr/logiciels/remoteexec/
  2. Envoyez l’URL de votre profil public Viadeo par Email à RE.linkedin@isdecisions.com




Le 1er février 2011, nous effectuerons un tirage au sort parmi tous les participants et le gagnant recevra un Dell Inspiron Duo.

N.B. Si vous communiquez sur RemoteExec 5.0 en utilisant Tweeter et LinkedIn et Viadeo, vous triplez vos chances de gagner !

Spread the word about RemoteExec 5.0 on Twitter and /or LinkedIn and win a Dell Inspiron Duo!

IS Decisions just announced the availability of RemoteExec 5.0 for Windows, an agentless software solution that allows IT pros to deploy MSI packages and patches, remotely execute programs and scripts, remotely manage Windows configurations, etc.

You have a Twitter and/or LinkedIn profile? Help us spread the word about RemoteExec 5.0 and win a Dell Inspiron Duo!
Dell Inspiron Duo
All you have to do is follow these easy steps:


You are on Twitter

You are on Twitter

  1. http://twitter.com/IS_Decisions
  2. Post the below announcement on your Twitter page before January 31st, 2010
    RT @IS_Decisions RemoteExec 5.0 for Windows is available. Deployment, remote executions and far +. Download a trial now: http://ow.ly/3o82U
  3. Email your Twitter username to RE.twitter@isdecisions.com after you post the announcement




You are on LinkedIn

You are on LinkedIn

  1. Follow IS Decisions Company Page on LinkedIn
  2. Share the below update before January 31st, 2010
    RemoteExec 5.0 is available. This agentless software solution allows IT pros to deploy MSI packages and patches, remotely execute programs and scripts and remotely manage configurations on enterprise-wide Windows networks.
    and attach this link:
    http://www.isdecisions.com/en/software/remoteexec
  3. Email the URL of your LinkedIn public profile to RE.linkedin@isdecisions.com after you share the update


On February 1st, 2011, the winner will be randomly selected among the participants and will get a Dell Inspiron Duo.

N.B. If you use both Twitter and LinkedIn to spread the word about RemoteExec 5.0, you double your chances to win!

Dec 01

WikiLeaks, the insider threat and how UserLock and FileAudit can help

The recent classified data disclosures found on WikiLeaks have raised strong concerns about mitigating insider threats in military and governmental Information Systems.

WikiLeaks

The soon to come disclosure of confidential records from private enterprises should also draw attention from every IT Security professional.
Julian Assange revealed in an interview with Andy Greenberg of Forbes that WikiLeaks is about to release confidential information from a major US bank,  as well as from pharmaceutical, financial and energy companies.

The way this information has been obtained underscores the problems surrounding access controls and malicious insiders. Beyond the WikiLeaks buzz, insider threat is continually occurring and will undeniably remain a significant issue.

 

At IS Decisions, we have been taking this fact into account for 10 years and we developed 2 software solutions, UserLock and FileAudit, whose main goal is to protect Microsoft Windows networks from careless or fraudulent users, thus efficiently minimizing insider threat.

UserLock

UserLock (awarded “Best of the Year 2010” by PC Mag) secures access to Windows networks and mitigates vulnerability by:

- restricting simultaneous sessions

- limiting user access to the network

- providing administrators with remote session control, alert options and advanced reporting for session analysis.

UserLock significantly reinforces Windows infrastructures security by giving network administrators the ability to:

- implement and enforce efficient restriction and access policies for Windows networks (LAN and WAN)

- be alerted when specific events occur (accepted logins, denied logins…) by user or user group

- remotely log off or lock a user session

- monitor in real time all connections on the network

- automatically log activity and generate comprehensive session reports and statistics


 FileAudit 

FileAudit (whose “simplicity and effectiveness” have been underlined in a review published on TechRepublic) monitors, archives and reports on access (or access attempts) to sensitive files and folders stored on Microsoft Windows systems.

FileAudit instantly gives a comprehensive list of:

- read/write accesses
- file ownership changes (accepted or denied)
- permission modifications (accepted or denied)

Each record details:

- the user
- the domain
- the date and time of connection and disconnection

for:

- a file
- a selection of files
- a folder and subfolder
- a selection of folders and subfolders

 

Full details about UserLock and free fully-functional trial version download

Full details about FileAudit and free fully-functional trial version download

Nov 22

UserLock wins PC Mag “Best of the Year 2010” Award

UserLock, our software solution that secures access to Microsoft Windows networks, has just been awarded “Best of the Year 2010” (Networking Software Category) by PC Mag.


For nearly 30 years, the PC Mag Award program has been one of the most stringent review programs in the IT industry as only 5% of products reviewed receive this Award and that make us really proud.

Having a trusted industry resource, like PC Magazine, give UserLock top honors indeed provides a level of confidence that IT pros can trust when considering their security software purchase.
This is a great reward for the hard work performed by IS Decisions’ Development Team and validates that our product strategy is right on track to keep us positioned as innovation leaders in the Microsoft Windows security software market.



According to Samara Lynn, the Network Analyst who performed UserLock review in PC Mag, UserLock “is an impressive product” and “is a solid tool that any Windows Network Administrator should consider adding to their network management toolkit if tight user access control is mandatory for their organization”.


UserLock indeed secures access to Windows networks and mitigates vulnerability by:
- restricting simultaneous sessions
- limiting user access to the network
- providing administrators with remote session control, alert options and advanced reporting for session analysis.


More than 800,000 UserLock licenses are already in use by worldwide security-demanding organizations including:
BAE Systems, Banco de Costa Rica, Banco Santander, Barclays Bank, BMW, Computer Sciences Corporation, Frito-Lay, Lockheed Martin, Mitsubishi, National Bank of Kuwait, South Wales Police, Telcel, Texas A&M University, United Nations Organization, University of Cambridge, University of Pennsylvania, US Department of Justice, US Department of Veterans Affairs, US Navy Marine Corps, TimeWarner, …



Get full details about UserLock and download a free, fully-functional, 45-day trial version

Nov 17

Why concurrent logins to a Windows network are a (very) bad idea

This article, written by our CEO François Amigorena, has been published on Network World on November 15th, 2010.

Network World logo

Microsoft Windows has more security features than any other operating system but is strangely lacking the fundamental and classic login session controls found in other environments, like mainframe and midrange systems, UNIX and Netware.


As an example, there is no way in Windows to limit a given user account from only logging on at one computer at a time.


In terms of interactive logins at desktops and laptops, a system administrator cannot therefore prevent a given user from going up to one computer, logging on there, letting somebody work as him or just leaving the computer unattended, and then walking up to another computer and logging on there.


And this is certainly one of the most underestimated flaws in a Windows network.


Why is preventing (or limiting) concurrent logins to a Windows network really important?


When you think about it, as human beings still don’t have the gift of ubiquity, there are very few legitimate reasons for a user to be connected to a network from several different workstations.


In the best case scenario, the user is just careless and forgot to close his session before opening a new one from another computer, however if it is not the same user but two (or more) different persons concurrently using the same credentials, no need to be a rocket scientist to imagine that at least one of them may have harmful intentions …


Here are a few examples of potentially dangerous situations made possible by the absence of simultaneous logins control:


- it increases the ability of users to share their credentials, as there is no consequence on their own access to the network.
This of course creates a whole accountability and non-repudiation issue as user A, connected to the network with the credentials of user B, can access user B’s data and applications, send Emails in his name, etc.

- it widens the attack surface of a network as a hacker can seamlessly use valid credentials at the same time as their legitimate owner (and make legitimate user accountable for any illegitimate action he takes).

- in the case of educational organizations that manage a network of free access computers for their students, it means that several workstations can unduly be blocked by one user, thus preventing proper sharing of resources. Or even worse, students can disclose their credentials to unauthorized third parties.

- it can very easily corrupt roaming profiles and create versioning conflicts for offline files.


As you can see, not controlling concurrent logins does significantly increase the network vulnerability.

That is why preventing or limiting simultaneous logins is required for an Information System to comply with major regulatory constraints, including for example NISPOM (National Industrial Security Program Operating Manual – 8-303, 8-602 and 8-609 sections) and ICD 503 (Intelligence Community Directive number 503 – “Identification and Authentication” and “Enforcement of sessions controls” sections).


Microsoft is perfectly aware of the issue and has relied on external, third-party software solutions to provide control over concurrent logins to a Windows network.



IS Decisions’ UserLock allows preventing or limiting concurrent logins to a Microsoft Windows network: get a free, fully-functional, 45-day trial version!

Nov 05

La version beta publique de RemoteExec 5.0 est disponible

Certains d’entre vous le savent, RemoteExec pour Windows est une solution logicielle 100% sans agent, permettant aux professionnels de l’informatique de :



- déployer rapidement et simplement packages MSI, Service Packs, correctifs, hotfixes, etc.

- exécuter à distance des programmes (.exe, .bat, .cmd) et des scripts (.vbs, .js), ainsi que les fichiers associés (.txt, .doc, .wav, .reg, .inf, .msi, …)

- gérer à distance les configurations Windows (modification des bases de registres, changement des mots de passe LocalAdmin, désactivation de comptes locaux, copie, mis à jour, suppression de fichiers et répertoires, …)

- interagir avec les serveurs et postes de travail Windows distants (arrêt matériel, réveil, redémarrage, fermeture et verrouillage des sessions utilisateurs, …)



RemoteExec 5.0 constitue une évolution majeure et comporte de très nombreuses améliorations et nouvelles fonctionnalités.


RemoteExec 5.0 est ainsi :

- totalement compatible avec Windows 7 (console d’administration et ordinateurs-cibles)


- plus facile à utiliser, grâce à une interface intuitive et entièrement nouvelle (onglets, fenêtres dockables, …) et des fonctionnalités pratiques, comme la possibilité de sauvegarder des actions et des listes d’ordinateurs-cibles afin de les réutiliser rapidement,


- plus puissant, avec des fonctionnalités de planification et d’automatisation, un reporting exhaustif sur la bonne fin ou l’échec des actions, la possibilité d’insérer des variables personnalisées pour les exécutions distantes sur chaque ordinateur,


- plus sécurisé, puisque toutes les communications sont désormais cryptées (à l’exception des transferts de fichiers et des modifications de bases de registre).

La nouvelle interface de RemoteExec 5.0

Vous pouvez librement télécharger la version beta publique de RemoteExec 5.0 depuis le site Web d’IS Decisions et notre équipe de support technique est à votre disposition pour vous aider et recueillir vos critiques et suggestions.



Consulter la liste détaillée des nouvelles fonctionnalités de RemoteExec 5.0

Télécharger la version beta de RemoteExec 5.0

Nov 04

RemoteExec 5.0 public beta is available!

As some of you may know, RemoteExec for Windows is a 100% agentless software solution that allows IT pros to:

- quickly and easily deploy MSI packages, Service Packs, patches, hotfixes, etc.

- remotely execute programs (.exe, .bat, .cmd) and scripts (.vbs, .js), as well as associated files (.txt, .doc, .wav, .reg, .inf, .msi, …)

- remotely manage Windows configurations (modify registry, change LocalAdmin passwords, disable local accounts, copy/update/delete files and folders)

- interact with remote Windows systems (power off, wake up, reboot, lock and close sessions, etc.)



RemoteExec 5.0 is a major update and comes with numerous enhancements and new features:

- fully compatible with Windows 7 (administration console and target computers)

- easier to use, thanks to a fully revamped and intuitive interface (tabs, dockable windows, …) and handy features, like the ability to save repetitive actions and lists of target computers in order to use them quickly again,

- more powerful, with full scheduling and automation features, comprehensive reporting about the success or failure of remote actions, as well as the ability to insert variable data for the execution on each remote computer,

- more secure, as all communications are now encrypted (except for file transfers and remote registry access)

RemoteExec 5.0 Screenshot

You can freely download RemoteExec 5.0 public beta from the IS Decisions website and our Technical Support Team is available to provide you with any assistance you might need during your tests and to get your valued feedback.



Comprehensive list of new features in RemoteExec 5.0 beta

Download RemoteExec 5.0 beta

May 26

The more times a user is logged in to the network, the harder it is to determine if that user is really the person who logged in.

Limiting the number of concurrent connections to two or even one makes tracking users’ network access easier and provides an additional level of security by reducing the number of Iogged in but unattended workstations.

Administrator accounts, in particular, should have limited concurrent connections. If an administrator should receive a denied login due to a current connections limit he would immediately know that his account had been compromised, or that another login had been inadvertently left active.

” —

Protecting Your Network Against Known Security Threats (Novell Research)


Prevent/limit concurrent logins to your Windows network using UserLock

May 12

Protect Windows networks from careless and fraudulent users

According to several recent studies, the most costly or damaging attacks against information systems are more often caused by insiders (employees or contractors with authorized access).


Taking this fact into account, we developed an enterprise software solution named UserLock, whose main goal is to protect Windows networks from careless and/or fraudulent users, thus efficiently mitigating insider threat.

UserLock logo

UserLock allows IT security teams to:


- prevent or limit simultaneous logon (same ID, same password), per user or user group
- record all session logging and locking events in an ODBC database (Access, SQL Server, Oracle, MySQL,…) for future reference
- monitor user sessions in realtime (who is connected, from which workstation(s), for how long…)
- remotely lock, logoff and reset all interactive sessions
- define working hours and/or maximum session time for protected users and disconnect users with prior warning outside of the defined timeframe(s) and/or when time is up
- restrict user group’s network access per workstation or IP range
- notify all users prior to gaining access to a system with a tailor-made warning message (legal disclaimer, etc.)
- …


More than 750,000 UserLock licenses are already in use by worldwide security-demanding organizations including:
BAE Systems, Banco de Costa Rica, Barclays Bank, BMW, Computer Sciences Corporation, Frito-Lay, Lockheed Martin, Mitsubishi, National Bank of Kuwait, South Wales Police, Telcel, United Nations Organization, US Department of Justice, US Department of Veterans Affairs, US Navy Marine Corps, TimeWarner, …


You will find information about UserLock on our website and this whitepaper will provide you with further details about holes in Windows native login controls and how UserLock fills them in and helps organizations to comply with major regulatory constraints (HIPAA, SOX, PCI, NISPOM, DCID 6/3 - ICD 503, GLBA, US Patriot Act, FISMA…).



Get your free, fully-functional, 180-day copy of UserLock