Deploying Linux Desktops in a Business (was Re: Antivirus for Ubuntu)

[Lea Gris]

Ben Edwards a écrit :
> Thanks for everybody's thoughts on the Antivirus issue.  The main
> reason this came up is we have lots of windows but also Solaris and
> Linux boxes, including a couple of desktops.  to move the Linux
> Desktop on in our business we need to develop a IT Strategy/policies.
> The key thing here is Due Diligence.  To persuade the business to
> allow. or even support, Linux on the desktop we need to have a proper
> strategy.  Having centrally managed Antivirus will make the business
> feel more confident in Linux - even if it is not nessesery - the
> education can come later and will take a long time, especially for non
> technical people.
> 
> For example what access do we give non technical people to there Linux
> Desktop.

Only user level.

  Is it possible to give non sudo access to the box but allow
> them to install security updates.

You should not allow users to decide when or how to update their desktop.

I suggest you maintain an internal on lan repository where there are
only packages and updates you or the IT department first validated.

Workstations sould be set up to automatically update only from the
internal on lan repository (custom /apt/sources.list users can't change).

Another way round of having centralized managment would be to set up
workstations as thin client accessing system disks and users home on a
central disk array NFSv4, GFS or SMBFS for homes, LDAP+SAMBA3 for user
managment. You would save some time managing backups, updates and
availability. This require some important thoughts on redundancy because
you wouldn't want everyone down because the server, network or disk
array fail.


-- 
     Léa Gris - http://www.noiraude.net/
()   Campagne du ruban texte brut contre les courriels en HTML,
/\   contre les pièces jointes dans un format propriétaire.
     Contre les DRMs appelez le : 09f911029d74e35bd84156c5635688c0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20070526/a47dc8b5/attachment.sig>