Educause Security Discussion mailing list archives

Re: Active Directory in comp labs


From: Brandon Payne <payneb () SVCC EDU>
Date: Thu, 3 Jun 2010 08:31:33 -0500

Currently, we aren't ready to have every student authenticate yet. This is a
fairly new project and is in its early stages still. Being that our labs
currently aren't joined to the domain, for testing purposes in the summer,
this will ease the move for students until that part is ready.

Being that we have DeepFreeze, the biggest thing that concerns me is profile
loading times. That means everytime a student sits down at a computer and
logs in, their profile will have to prepare (as if it was the first time).
So we're talking about 2 minutes or so of waiting time before they can
actually use the computer.  As it stands, DeepFreeze has been a savior for
our department b/c I rarely have to worry about malware/viruses/system
changes/etc.

Wondering if that was an issue for you too?

-- 
Brandon Payne
Technical Support Specialist
Information Services
Sauk Valley Community College


On Thu, Jun 3, 2010 at 7:55 AM, Todd Clementz <clementz.7 () osu edu> wrote:

 Brandon,



We used DeepFreeze for a year with a few hang-ups, but there were other
reasons for us going away from it.  I do have a questions about a unified
username and password.  Are your security people, and maybe you are the
security people, not concerned about anything being done from a
computer…i.e. malicious email or hacking attempt or anything like that?
Here at OSU, the policies and procedures are pretty lengthy with regard to
user/network security.



Todd Clementz

Systems Engineer

Knowlton School of Architecture

The Ohio State University

614.292.8544



*From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Brandon Payne
*Sent:* Thursday, June 03, 2010 8:35 AM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [SECURITY] Active Directory in comp labs



Starting this Fall we will be rolling out Active Directory for the first
time in all of our computer labs.  All computer lab machines will be running
the Faronics - DeepFreeze product (when computers are rebooted, they are
back to a fresh state).  To simplify things for now, all students will be
using one domain profile to login, "Student."  To get around any sort of
password expiring issues, Faronics said to set the Maximum Password Age to
999 or "Not Defined."  Is anyone else running Deepfreeze while joined to the
domain?  Hoping there aren't any other issues.



All lab machines are Windows 7.  I already have some computers deployed and
have had some use the past couple weeks and they work fine so far. The real
test will be summer semester.



Do you know of any caveats or recommended items for running AD in the labs?
Thanks in advance...


--
Brandon Payne
Technical Support Specialist
Information Services
Sauk Valley Community College


Current thread: