Dial-up Connection Security

I am not sure which newsgroup to pose this question to, so I'm starting here.
Please refer me elsewhere as needed.

We are a software vendor that uses dial-up connections to access client
sites for support purposes. In our current setup, an employee in our office
will use terminal services to access one of our internal "dial-out" servers,
then establish the dial-up connection to the client site. All of this works
fine. The problem is....these users are going into the dial-up connection
settings and turning off the idle time-out settings I have put in so we don't
rack up hellacious phone bills. All of that explaination builds up to the
following question; How can I, either through local policy, group policy, or
otherwise, make it to where once I create a dial-up connection on the server
the way I want it set up, block our employee's from changing ANY of those
settings? Before anyone mentions the obvious, all of our employee's have
local administrator access to these servers and they have to have it in order
to support our clients properly. Any and all suggestions are greatly
appreciated as I'm getting way too much heat from upper-management about our
phone bills. Thank you in advance.

"jfloyd" <(E-Mail Removed)> wrote in message
newsFFD89CE-4888-41C3-88D8-(E-Mail Removed)...
> I am not sure which newsgroup to pose this question to, so I'm starting
here.
> Please refer me elsewhere as needed.
>
> We are a software vendor that uses dial-up connections to access client
> sites for support purposes. In our current setup, an employee in our
office
> will use terminal services to access one of our internal "dial-out"
servers,
> then establish the dial-up connection to the client site. All of this
works
> fine. The problem is....these users are going into the dial-up connection
> settings and turning off the idle time-out settings I have put in so we
don't
> rack up hellacious phone bills. All of that explaination builds up to the
> following question; How can I, either through local policy, group policy,
or
> otherwise, make it to where once I create a dial-up connection on the
server
> the way I want it set up, block our employee's from changing ANY of those
> settings? Before anyone mentions the obvious, all of our employee's have
> local administrator access to these servers and they have to have it in
order
> to support our clients properly. Any and all suggestions are greatly
> appreciated as I'm getting way too much heat from upper-management about
our
> phone bills. Thank you in advance.

Easy answer, give the phone bill to the person concerned. They will soon
stop switching the protection off!
Believe me it works!!

John..

I understand where you're coming from, but that's not a solution. The manager
of that department doesn't care nor will he or his people be held
accountable. I need some sort of security answer to this issue. My hands are
tied.

"Nospam" wrote:

>
> "jfloyd" <(E-Mail Removed)> wrote in message
> newsFFD89CE-4888-41C3-88D8-(E-Mail Removed)...
> > I am not sure which newsgroup to pose this question to, so I'm starting
> here.
> > Please refer me elsewhere as needed.
> >
> > We are a software vendor that uses dial-up connections to access client
> > sites for support purposes. In our current setup, an employee in our
> office
> > will use terminal services to access one of our internal "dial-out"
> servers,
> > then establish the dial-up connection to the client site. All of this
> works
> > fine. The problem is....these users are going into the dial-up connection
> > settings and turning off the idle time-out settings I have put in so we
> don't
> > rack up hellacious phone bills. All of that explaination builds up to the
> > following question; How can I, either through local policy, group policy,
> or
> > otherwise, make it to where once I create a dial-up connection on the
> server
> > the way I want it set up, block our employee's from changing ANY of those
> > settings? Before anyone mentions the obvious, all of our employee's have
> > local administrator access to these servers and they have to have it in
> order
> > to support our clients properly. Any and all suggestions are greatly
> > appreciated as I'm getting way too much heat from upper-management about
> our
> > phone bills. Thank you in advance.
>
> Easy answer, give the phone bill to the person concerned. They will soon
> stop switching the protection off!
> Believe me it works!!
>
> John..
>
>
>

Ask in a Group devoted to Terminal Services.

My own solution would be to find another solution that doesn't involve
Dialup. If you can't afford the phone bill, then you can't afford Dialup.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------


"jfloyd" <(E-Mail Removed)> wrote in message
news:4D90EC36-9790-4308-AA39-(E-Mail Removed)...
> I understand where you're coming from, but that's not a solution. The
manager
> of that department doesn't care nor will he or his people be held
> accountable. I need some sort of security answer to this issue. My hands
are
> tied.
>
> "Nospam" wrote:
>
> >
> > "jfloyd" <(E-Mail Removed)> wrote in message
> > newsFFD89CE-4888-41C3-88D8-(E-Mail Removed)...
> > > I am not sure which newsgroup to pose this question to, so I'm
starting
> > here.
> > > Please refer me elsewhere as needed.
> > >
> > > We are a software vendor that uses dial-up connections to access
client
> > > sites for support purposes. In our current setup, an employee in our
> > office
> > > will use terminal services to access one of our internal "dial-out"
> > servers,
> > > then establish the dial-up connection to the client site. All of this
> > works
> > > fine. The problem is....these users are going into the dial-up
connection
> > > settings and turning off the idle time-out settings I have put in so
we
> > don't
> > > rack up hellacious phone bills. All of that explaination builds up to
the
> > > following question; How can I, either through local policy, group
policy,
> > or
> > > otherwise, make it to where once I create a dial-up connection on the
> > server
> > > the way I want it set up, block our employee's from changing ANY of
those
> > > settings? Before anyone mentions the obvious, all of our employee's
have
> > > local administrator access to these servers and they have to have it
in
> > order
> > > to support our clients properly. Any and all suggestions are greatly
> > > appreciated as I'm getting way too much heat from upper-management
about
> > our
> > > phone bills. Thank you in advance.
> >
> > Easy answer, give the phone bill to the person concerned. They will soon
> > stop switching the protection off!
> > Believe me it works!!
> >
> > John..
> >
> >
> >