Educause Security Discussion mailing list archives

Re: Active Directory in comp labs


From: Brandon Payne <payneb () SVCC EDU>
Date: Thu, 3 Jun 2010 14:25:58 -0500

Todd: Ok, I'll have to look into Mandatory profiles.  Never dealt with those
before.  As it stands now, our current lab machines update in our
maintenance schedule during the night. Thanks...

James: Since each student logs in with their own account, how do they feel
about the profile load times?

-- 
Brandon Payne
Technical Support Specialist
Information Services
Sauk Valley Community College


On Thu, Jun 3, 2010 at 8:46 AM, Todd Clementz <clementz.7 () osu edu> wrote:

 In order to knock down profile times, we elected to use Mandatory
profiles to help with profile load times.  It caused a bit more work in the
Summer as far as loading a model,  but it works great.  With regard to
Deepfreeze, the only downside we had with the program was in relation to
updates.  Before Altiris, we managed the updates on some of the highend lab
machines manually and that caused problems with unlocking the deepfreeze
software, loading the updates, and then turning deepfreeze back on.  I’m
sure with Altiris and other packages out there, that is eleviated now.



Todd Clementz

Systems Engineer

Knowlton School of Architecture

The Ohio State University

614.292.8544



*From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Brandon Payne
*Sent:* Thursday, June 03, 2010 9:32 AM

*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] Active Directory in comp labs





Currently, we aren't ready to have every student authenticate yet. This is
a fairly new project and is in its early stages still. Being that our labs
currently aren't joined to the domain, for testing purposes in the summer,
this will ease the move for students until that part is ready.



Being that we have DeepFreeze, the biggest thing that concerns me is
profile loading times. That means everytime a student sits down at a
computer and logs in, their profile will have to prepare (as if it was the
first time). So we're talking about 2 minutes or so of waiting time before
they can actually use the computer.  As it stands, DeepFreeze has been a
savior for our department b/c I rarely have to worry about
malware/viruses/system changes/etc.



Wondering if that was an issue for you too?


--
Brandon Payne
Technical Support Specialist
Information Services
Sauk Valley Community College

 On Thu, Jun 3, 2010 at 7:55 AM, Todd Clementz <clementz.7 () osu edu> wrote:

Brandon,



We used DeepFreeze for a year with a few hang-ups, but there were other
reasons for us going away from it.  I do have a questions about a unified
username and password.  Are your security people, and maybe you are the
security people, not concerned about anything being done from a
computer…i.e. malicious email or hacking attempt or anything like that?
Here at OSU, the policies and procedures are pretty lengthy with regard to
user/network security.



Todd Clementz

Systems Engineer

Knowlton School of Architecture

The Ohio State University

614.292.8544



*From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Brandon Payne
*Sent:* Thursday, June 03, 2010 8:35 AM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [SECURITY] Active Directory in comp labs



Starting this Fall we will be rolling out Active Directory for the first
time in all of our computer labs.  All computer lab machines will be running
the Faronics - DeepFreeze product (when computers are rebooted, they are
back to a fresh state).  To simplify things for now, all students will be
using one domain profile to login, "Student."  To get around any sort of
password expiring issues, Faronics said to set the Maximum Password Age to
999 or "Not Defined."  Is anyone else running Deepfreeze while joined to the
domain?  Hoping there aren't any other issues.



All lab machines are Windows 7.  I already have some computers deployed and
have had some use the past couple weeks and they work fine so far. The real
test will be summer semester.



Do you know of any caveats or recommended items for running AD in the labs?
Thanks in advance...


--
Brandon Payne
Technical Support Specialist
Information Services
Sauk Valley Community College




Current thread: