Educause Security Discussion mailing list archives
Re: Active Directory in comp labs
From: Brandon Payne <payneb () SVCC EDU>
Date: Thu, 3 Jun 2010 14:25:58 -0500
Todd: Ok, I'll have to look into Mandatory profiles. Never dealt with those before. As it stands now, our current lab machines update in our maintenance schedule during the night. Thanks... James: Since each student logs in with their own account, how do they feel about the profile load times? -- Brandon Payne Technical Support Specialist Information Services Sauk Valley Community College On Thu, Jun 3, 2010 at 8:46 AM, Todd Clementz <clementz.7 () osu edu> wrote:
In order to knock down profile times, we elected to use Mandatory profiles to help with profile load times. It caused a bit more work in the Summer as far as loading a model, but it works great. With regard to Deepfreeze, the only downside we had with the program was in relation to updates. Before Altiris, we managed the updates on some of the highend lab machines manually and that caused problems with unlocking the deepfreeze software, loading the updates, and then turning deepfreeze back on. I’m sure with Altiris and other packages out there, that is eleviated now. Todd Clementz Systems Engineer Knowlton School of Architecture The Ohio State University 614.292.8544 *From:* The EDUCAUSE Security Constituent Group Listserv [mailto: SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Brandon Payne *Sent:* Thursday, June 03, 2010 9:32 AM *To:* SECURITY () LISTSERV EDUCAUSE EDU *Subject:* Re: [SECURITY] Active Directory in comp labs Currently, we aren't ready to have every student authenticate yet. This is a fairly new project and is in its early stages still. Being that our labs currently aren't joined to the domain, for testing purposes in the summer, this will ease the move for students until that part is ready. Being that we have DeepFreeze, the biggest thing that concerns me is profile loading times. That means everytime a student sits down at a computer and logs in, their profile will have to prepare (as if it was the first time). So we're talking about 2 minutes or so of waiting time before they can actually use the computer. As it stands, DeepFreeze has been a savior for our department b/c I rarely have to worry about malware/viruses/system changes/etc. Wondering if that was an issue for you too? -- Brandon Payne Technical Support Specialist Information Services Sauk Valley Community College On Thu, Jun 3, 2010 at 7:55 AM, Todd Clementz <clementz.7 () osu edu> wrote: Brandon, We used DeepFreeze for a year with a few hang-ups, but there were other reasons for us going away from it. I do have a questions about a unified username and password. Are your security people, and maybe you are the security people, not concerned about anything being done from a computer…i.e. malicious email or hacking attempt or anything like that? Here at OSU, the policies and procedures are pretty lengthy with regard to user/network security. Todd Clementz Systems Engineer Knowlton School of Architecture The Ohio State University 614.292.8544 *From:* The EDUCAUSE Security Constituent Group Listserv [mailto: SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Brandon Payne *Sent:* Thursday, June 03, 2010 8:35 AM *To:* SECURITY () LISTSERV EDUCAUSE EDU *Subject:* [SECURITY] Active Directory in comp labs Starting this Fall we will be rolling out Active Directory for the first time in all of our computer labs. All computer lab machines will be running the Faronics - DeepFreeze product (when computers are rebooted, they are back to a fresh state). To simplify things for now, all students will be using one domain profile to login, "Student." To get around any sort of password expiring issues, Faronics said to set the Maximum Password Age to 999 or "Not Defined." Is anyone else running Deepfreeze while joined to the domain? Hoping there aren't any other issues. All lab machines are Windows 7. I already have some computers deployed and have had some use the past couple weeks and they work fine so far. The real test will be summer semester. Do you know of any caveats or recommended items for running AD in the labs? Thanks in advance... -- Brandon Payne Technical Support Specialist Information Services Sauk Valley Community College
Current thread:
- Active Directory in comp labs Brandon Payne (Jun 03)
- <Possible follow-ups>
- Re: Active Directory in comp labs Todd Clementz (Jun 03)
- Re: Active Directory in comp labs James R. Pardonek (Jun 03)
- Re: Active Directory in comp labs Brandon Payne (Jun 03)
- Re: Active Directory in comp labs Todd Clementz (Jun 03)
- Re: Active Directory in comp labs Brandon Payne (Jun 03)