Locking down file transfers in PCAnywhere
I have a question relating to file transfer when using PCAnywhere. Basically we have a team of support guys who use PCAnywhere to remote to client sites for support purposes. Despite us configuring the support machines to disallow file transfers via the configuration option within PCAnywhere users staff are simply ticking the option to reenable the functionality.
Our main problem here is that the support users have local administrator privs for reasons I wont go into here. Yes I know the best policy is to take this away but that simply is not an option right now, so please dont labour this point.
With this in mind my question is : How can we remove the ability of PCAnywhere to perform file transfers?
Is it possible to block a port at our corporate firewalls for example, or make a registry change which we can enforce using a GPO?
Our Host machines are v10, the target machines v11