|
Posted by Al Dunbar on November 30, 2007, 12:24 pm
Please log in for more thread options
> Hello,
>
> I'm trying to find a product/solution that would check a user's computer
> at logon to make sure it has the latest security patches. If it doesn't
> it would not allow them to log into the network.
>
> Does anyone know if such a solution exists?
I am not aware of such a product, however, I am not so sure it is even
feasible to do this.
First off, the application would need to be able to access the network in
order to know what patches should be present. The computer itself would also
need to be on-line in order to have the patches applied, unless your IT
staff are doing this off-line with a CD.
Second, if it checks "at" logon, it is probably doing so in a logon script,
at which point the user is already logged in. Once the product determined
that the workstation was out of date, it could, I suppose, do a logoff or
shutdown. The question is, would it be able to do that fast enough to
accomplish this before the user could terminate the process?
/Al
|