Posted by Justin Reynolds on December 03, 2009 at 13:54:58:
In Reply to: Re: 1 client PC can't see Comet Security Server posted by Grant Foraker on December 03, 2009 at 10:42:49:
I've found the best solution against all things Windows is: no local administrator rights.
If the installed software is designed correctly, the user should never need admin rights. (Really, does Joe User need to be able to write to C:\Windows\System32? I think not.)
Any malware gets trapped in the user's profile, which is easy enough to clean or recreate. The machine itself remains free of problems, since the user's account doesn't have the ability to write anywhere except "Documents & Settings\[user]". As a bonus, it cuts down on users installing junk. You don't need that super cute smiley toolbar to do your job.
This is why I continue to insist that Comet play nicely with TMP directories, yadda yadda yadda. It's the last thorn in my side.
Anyway -- I find the Windows firewall to be a band-aid, rather than a solution. I'm happier with it turned off; I've never seen it do anything useful, anyway.
Each file can be a maximum of 1MB in length Uploaded files will be purged from the server on a regular basis.