The Managed Network

Right now the industry of desktop protection is somewhat fragmented. Antivirus over there; antispyware over here. Although some corporate desktop products have included antispyware in their antivirus software, or antispyware in their patching tools, the industry is still working toward a cohesive control of desktops in the small business space. At least in the SBS network with Active Directory, you can leverage the ability to take advantage and lock down desktops and control. However, the typical small business consultant doesn't just maintain networked machines, she also maintains the home machines of employees of the firm. Unfortunately, not many tools are available to centrally manage machines that are not joined to the domain. The best tool you have for such services is just utilizing several remote control programs available in the marketplace. Some of the options include

• Logmein Pro, Logmein ReachRemote control software that includes audit reports that can be used for billing purposes; only requires port 80 and 443 access (http://www.logmein.com).

• GotomypcRemote control software that only requires port 80 and port 443 access (http://www.gotomypc.com).

• PCAnywhereSymantec's non-webbased remote control software. The disadvantage is that if the router is reset, you may lose the remote access due to the blockage of the ports (http://www.symantec.com).

• WebexOffers several packages for remote connectivity that include a request/confirmation process where the client approves the access (http://www.webex.com).

• Office Live meetingMicrosoft's higher end packages can be utilized for remote access as well (https://main.placeware.com/ordering/lmbuy_it/buy_it.cfm?promocode=2730).

• RadminRemote access package (http://www.radmin.com/).

• VNC and Tight VNCFree remote control software (http://www.tightvnc.com/.

• Remote Desktop ProtocolBuilt into Windows XP is the native desktop version of Terminal Services that allow you to remotely connect.

In each of these products, there is a concern that such remote control tools can be easily introduced into a network where there is no policy blocking them. Make sure that your end users know when they can and cannot be installed, and review the logging mechanism of each platform. Some of the newer ones such as Logmein have built-in logging capability.

Best Practice: Ensuring Remote Access

Even on your non-networked clients, it is key to have remote access for remote cleanup. Have a plan to be able to remotely manage these home machines as well by using such tools as Remote Desktop and Logmein.

The important thing to keep in mind with all these solutions is to ensure that you can control any desktop that may attach to your network. Remember that any desktop attaching remotely back to your network may affect the health of your own network.