How do I stop users from using the standard inbuilt VPN connection in Windows

We have a UAG Portal setup to check the security of users computers etc then if it is all correct they are presented with the log in and once logged in the are connected to the corpirate network via a SSTP connection. The all works fine but the issue
I have is users can bypass all the checking but just going into network connections on their local computer and creating a SSTP VPN connection, like on this webpage http://blogs.technet.com/b/tugait/archive/2011/10/12/how-to-publish-a-vpn-sstp-using-your-uag-in-a-https-trunk.aspx
Any idea how to stop users being able to do this and forcing them to use Internet Explorer?

Found my answer on this page http://technet.microsoft.com/en-us/library/ee809077.aspx
"To enforce Forefront UAG portal authentication, do not set users dial-in properties to Allow
access."

Similar Messages

How do I stop Mavericks from using the Internet, I have a DATA PLAN LIMIT!

Since installing Mavericks on our 2 iMacs our DATA PLAN is overused. Over 1.5 to 2.5 GB PER DAY! This is unacceptable!
How do I stop Mavericks from using the Internet, I have a DATA PLAN LIMIT!
HELP!

Have you seen this thread…
https://discussions.apple.com/message/23826437#23826437
The short story is that the new 'certifcate checking' system could be downloading large amounts of data, you can turn it of as follows…
clockworkapps wrote:
Turning off CRL & OCSP checking in the Certificates Preferences in Keychain Access solved the problem.
You can do as others have done, install Little Snitch & use the Network Monitor to view what is happening, that thread has some good advice. http://www.obdev.at/products/littlesnitch/index.html
@Topher, Activity Monitor is a bit pants for tracking processes that respawn or just go away (I assume its because it's an on-demand job, have you got a nice article on 'mach services', Linc confused me !? ).
ocspd seems to do that in my limited testing,
Little Snitch is the easiest way to monitor & you can get away with the free demo for long enough to test if funds are tight.

How do I stop iTunes from using the cloud?

I use iTunes primarily for listening to podcasts. I recently upgraded to version 11.1.
Now, it used to be that I'd refresh podcasts, download the subscribed ones, listen to them, delete them. done. I just opened iTunes and under one of the podcasts, there were about a hundred old ones; I used to be able to show everything on one page, now I have to scroll 4 or 6 pages to see what I want. The "new" podcasts have a little cloud icon, so I guess that's where they are, or downloaded from.
Two questions: how do I delete these files, and how do I stop from using the cloud for podcasts?
(This is a repeat question, because SoonerDoc1 marked it as solved, and it's not)

That doesn't fix it as the podcast with the cloud logo show up as/in unplayed, I subscribe to CNET First Look Podcasts, some download and some don't download but have a cloud logo. Seems very random. iTunes is a badly written application that is getting worse after every new release. If iTunes doesn't improve soon I'll downgrade to iTunes 10.7 which was just about use-able. for the second time.

How to restrict a user from using the transaction code SU01?

How can I grant a profile to a user with the profile SAP_ALL except running the transaction code SU01?
I know how to lock the transaction code using SM01 but is there any other way to do it.

Go to S_TCODE
Double click on it and give the combinations like        A* -   X*
                                                                             SU00
                                                                             SU02 - Z*
                     Try this one definately it will work.

How to prevent a portal user from using the BEx Analyzer ?

Hi,
we have different type of users : most users may use the portal as well
as the analyzer ;
we have one special user with extended authorizations : this user
should use the portal , where he has a limited set of queries to run
with hardcoded filters ==> this user should not be able to use the
analyzer however, since he then would be able to call all other queries
by using the find function ;
how can we make sure this user cannot use the analyzer , using SAP
authorizations ?
best regards,
Erwin Van Giel.

Hi,
if I remove the complete S_RFC authorization for the user then the BEx Analyzer cannot connect anymore to the BW system, but neither can the user run reports from the portal : it needs the S_RFC with 'SYST'.
If I only remove the RRMX from the S_TCODE and from the S_RFC, it does not prevent the user from starting the BEx Analyzer and connecting to the BW system. It only stops the user if he would start the RRMX transaction from within an SAPGUI session.
Perhaps there should be a value in the S_RFC that allows connections from the portal but not from the BEx Analyzer .... ?
so not solved yet ....
best regards,
Erwin.

How do I stop GoLive from changing the location of my CSScriptLib.js file?

How do I stop GoLive from changing the location of my CSScriptLib.js file?
I am making rollovers and want my CSScriptLib.js to be in the same folder as my HTML files.
Every time I edit the rollovers GoLIve recreates the path of the CSScriptLib.js to file:///Users/xxx/Library/Preferences/Adobe/GoLive/Settings8/JScripts/GlobalScripts/CSScr iptLib.js so it won't work when uploaded. I always need to edit my HTML before uploading. All I want it to say is src="CSScriptLib.js" as the default.

The site file is a database that keeps track of all your assets (and much more), including the scriptLib file. As soon as the page is saved (when you use the site file and it's open) the link will be change to the correct path that will work on the server.
If you're not using the site file you might as well use a text editor, since most of GL functionality is gone.

What stops users from extracting the JAR, decompiling to get FTP details?

So I have made an applet to upload files to a server which uses FTp details. How can I stop them from getting the JAR file , extracting the files and decompiling the classes to get the FTP details.
When I sign the pplet, the process asks for a passwors, will the extraction process ask for this password?
Thanks

Hi,
From what I've seen the JAR file can be extracted easily with WinRar (or WinZip if you rename to .zip extension!). The signing just verifies that the contents of the jar haven't been changed by someone since it was created.
Heh it looks like we're working on the same problem...!
What I'm doing with my applet (based on the ZUpload applet from Sourceforge) is have it to read in the ftp connection params from an encrypted file. In my case the users are "semi trusted" so I am just trying to prevent someone casually lifting the ftp login and bypassing the applet. Obviously in theory someone could still decompile my classes and get the secret key then decrypt the params, but in my case this is unlikely to be a problem.
I'd love to hear if you find a better way!

I have transfered my library my library to a NAS drive. How do I stop Itunes from creating the default folder on the local drive?

I've transferred my Itunes Media Library to a NAS drive, and pointed Itunes (using the advanced preferences tab) to the relevant folder on the NAS drive. I have done this to free up disk space on a computer I primarily use for work but which I use both at home and at work. The NAS drive is at home. (To clarify, I am not expecting Itunes to function at work, only at home when access to the NAS drive is available).
Under certain circumstances Itunes will start-up at work and when it does it will create the folder structure for the Itunes Media Library in the default location (on the local drive) instead of looking for the location I have specified (the NAS drive) which it should not be able to find when I am at work and telling me that it can't find it (which would be fine).
How do I stop Itunes from recreating the default folder structure and defaulting the file path to the standard media library location on my local drive? Every time this happens I have to re-point Itunes to the NAS drive location, which often requires me to reconsolicate libraries which is tedious and time consuming. It seems that in the process of one of these consolidations I have lost some of the media files. They are still in the library (ie. visible in the Itunes window) but Itunes can't find the media associated with that file - identifying them with an excamation mark "!".
Any help with this would be appreciated, as I have read several forums and threads, and despite trying several different approaches I have been unable to address the problem, which appears to be exacerbated by the laptop being remote from the NAS drive.

angelofromnsw wrote:
Can I put the ".itl" and other database files on the NAS, and if so where would I put them? I'm thinking that if the library file is only available at home then the ITunes library won't get corrupted at work when it can't find the media, in the event that I accidentally start up itunes eg. while opening an attachment or disc that can be read by Itunes.
iTunes will start up and you will have an empty library.
Can I put the ".itl" and other database files on the NAS, and if so where would I put them?
Yes.
Quit iTunes.
Copy the /Music/iTunes/ folder on the NAS.
Move the /iTunes media/ folder currently on the NAS into the /iTunes/ folder you just copied to the NAS.
Hold Option, launch iTunes, select Choose library... and select the iTunes folder on the NAS.
You can delete /Music/iTunes/ folder on the internal drive.
If you launch iTunes while NOT comnnected to the NAS, iTunes will recreate the /Music/iTunes/ folder and you will have an empty library.
WHen you are again connected to the NAS, just do step 4 above.
Do you know what the advantages and disadvantages are of having the database files like the ".itl" files stored locally versus on the NAS?
Keeping everyhing together inside the iTunes folder makes it "cleaner" and simpler to manage everything.

How do I stop mail from looping the same emails into inbox?

How do I stop mail from looping the same emails into the inbox over and over again? It does the same thing with deleted messages that keep showing up again and again in multiples even after deleting them. I have made sure my server settings in all email accounts are set to delete immediately once I delete them on my MacBook Pro/IPhone. This issue has severely compromised the efficiency of Mail on my MacBook. Thanks for any help you're able to give me.

I have tried that but it does not fix the problem.
The "card" group is not a previous recipient.
Although not available for editing in Contacts, it is a valid group showing up in the "To" field of Messages, Mail, or any app using the AddressBook.
Its associated file is automatically created in:
~/Library/ApplicationSupport/AddressBook/Sources/<hexaFolder>/MetaData/<hexa>ABG roup.abcdg
This is why it also shows up in the Spotlight results...
If I manually remove this file, it gets recreated...
If I turn off the syncing through iCloud, the entry gets deleted. If I turn it up, it comes back!

How to disable other users from changing the status

Hi,
The status entry field can be changed irrespective of ownership in Documents.
I was able to change the status on the document created by other user.
Example: The status of document was In-Work. The document owner was X. But I was able to change it to Inspection Check.
How to disable other users from changing the status?
Regards,
Shashi

This is a frequently discussed topic.Please use the search feature.It has been discussed in [previous posts|CV01N: Filter documents by role; in various contexts.
Regards,
Pradeepkumar Haragoldavar

HT5624 Someone I don't know is using my email address as their Apple ID to sign and purchase apps ect and I keep getting notifications in my emails. How do I stop them from using my email address????????

Someone I don't know is using my email address as their Apple ID to sign and purchase apps ect and I keep getting notifications in my emails. How do I stop them from using my email address????????

If a person is using your email address, you should change your email password and make sure there aren't any forwards to some strange email address.
An example if you were using gmail, under account settings, a forward can be set up to send messages to another email address.
If your email address is say, you own domain, such as somename@somename dot com, make sure the forwards are forwards you set up.
If your email account was hacked and the bad guy has access, you need to cut him off, first by changing the password and second cut off any message forwarding to the bad guy if he set it up. Just changing the password would keep a bad guy out, but if the bad guy set up a forward, he will still get your email.
A confirmation from Apple would have come to your email address in order to confirm that Apple ID. If you are getting the other person's purchase notifications, you would have gotten a confirmation of that account from Apple.

How can i stop user to get the same screen while entering same T code

hi experts,
how can i stop user to get the same screen while entering same T code (_Means i want user enter same t code but got different different screen how it is possible.)_
i want to know how can we set a authorization is such a manner ...
Through different different login id user got different different screen while entering same T-code.
for example if there is two functional login id mum & noida...
then user login through that and
enter any same functional tcode (for getting purchase order)
but get different different window...so how come it is possible.....
plz explain in brief
thanks in advance...plz do reply as soon as possible

For a custom transaction this is easy, you need to ask your developers to be able to direct users to different screens based on the results of an authorisation check. You could have an auth field e.g. ZSCREEN which is checked in the program & decides what screen the user has access to.
For standard transactions, unless already coded, I would forget it & do what is recommended by Subramaniam and create transaction variants as required. Assign each variant to a custom t-code and users access it that way.
What I am interested is is why do you want to do this?

Is it possible to prevent users from using the ''Purge'' option from the ''Recover deleted items'' in Office 365?

Hi,
After speaking with a Microsoft engineer over the phone, I've been told that there is no way to prevent users to go to their OWA and manually Purge specific items from the ''Recover deleted items''. The Microsoft tech told us to place the desired mailboxes
on a litigation-hold and that all data will be recoverable... but only from the time you place the mailbox onto Litigation-Hold and previous items, which doesn't take effect for new-coming emails.
1- From what I understand, any new items coming in the mailbox after the Litigation-Hold is put in place will still be ''purgeable'', right?
2- Is there a way (PowerShell, Security group, etc.) that can prevent a user from using the Purge option?
We are very surprised that there is absolutely no thread that talks about this issue, which in our opinion, is a major legal and security flaw from Office 365. This is a main concern for us to actually go with Office365. For instance, this means that at
any given time, if a user exchanges emails with a competitor, they can manually purge emails sent and receive as soon as it is sent/received, even after Litigation-Hold is in place.
Thank you for your reply and let us know if you have more questions.
Normand Bessette, IT support technician, Newad Media

Thank you for the reply.
Is there still a way to prevent users from using the Purge option, like with a Powershell script to disable Purge?

On Game Center how do you stop players from seeing the last time you have played a game?

on Game Center how do you stop players from seeing the last time you have played a game? Or the last time you signed in.

hello, this should be addressed in a later version of firefox. as a workaround in the meanwhile you could try this: enter '''about:config''' into the firefox location bar (confirm the info message in case it shows up) & search for the preference named '''browser.sessionstore.resume_from_crash'''. double-click it and change its value to '''false'''.

How to prevent multiple users from updating the same data in coherence

Hi,
I have a Java Web Application and for data cache am using coherence 3.5. The same data maybe shared by multiple users which maybe in hundreds. Now how do I prevent multiple users from updating the same data in coherence i.e. is there something in coherence that will only allow one user a time to update. If one user is in a process of updating a data in coherence and some other user also tries to update then the second user should get an error.
Thanks

I have a question on the same line. How can I restrict someone from updating a cache value when I a process is already working on it. I tried locking the cache key but it does not stop other process to update it , it only does not allow other process to get lock on it.

How do I stop users from using the standard inbuilt VPN connection in Windows

Similar Messages

Maybe you are looking for