How to remove/disable button

[gcheak]

Syteline 6.01.10
Progress 9.1C18
Terminal Services on all clients

Hello,

On the main Syteline menu there is a button labeled FSTP that fires up the local browser and loads the Frontstep web page.

The workstations in our shop have Internet disabled.

This weekend a clever user discovered he could get around that restriction by loading a Syteline session in TS, click the FSTP button, and load a "server" instance of IE. This is not good.

So my question is, how can I disable or remove the FSTP button from the main menu.

Thanks.

Greg

 

[rainylsh]

really? i'll take care of it

 

[gcheak]

Yep, that's what I said, just before I changed the permissions on iexplorer.exe to admin only.

Problem solved.

 

[rainylsh]

Yep, that's what I said, just before I changed the permissions on iexplorer.exe to admin only.

Problem solved.

what a good idea.
but did you check why syteline button can link net?
maybe some port was opened?

 

[gcheak]

The button links to the Frontstep website, so it appears to be by design. Once IE is open though, the user can go anywhere they want. i.e. Check sports scores, My Space, etc., all on the server's dime.

It is a gaping security hole that we never considered until we caught it being exploited.

Greg