Educause Security Discussion mailing list archives
Re: Deepfreeze - Why not?
From: Sam Stelfox <SStelfox () VTC VSC EDU>
Date: Thu, 17 Nov 2011 16:12:41 -0500
When I went down this course the most prominent answer was patches. Yes there is a way to boot into an override mode which will allow you to permanently install patches but there isn't any way to automate that. It means you have to go to each individual machine reboot it into the unprotected mode, run all of the patches (if a service pack comes out this can easily take an hour on a machine that isn't brandy new), then reboot and make sure DeepFreeze is still working.
Now personally I haven't looked at it in a few years so it's possible they put out some sort of management tool to handle this. It doesn't really buy you much security in my opinion though if you don't give your users administrative privileges over the machines, blow away their user profiles, have an up to date anti-virus/spyware/malware program on there, and re-image your labs on a semester to semester (or even a year to year basis).
On 11/17/2011 04:05 PM, Sarazen, Daniel wrote:
Hi All, We have some folks who’d like to see Deepfreeze installed on all lab PCs, but the IT department is balking. What do people think is the best reason to not install deepfreeze? Is there one? Thanks, Dan
-- Regards, Sam Stelfox Network Administrator Vermont Technical College
Current thread:
- Deepfreeze - Why not? Sarazen, Daniel (Nov 17)
- Re: Deepfreeze - Why not? Crary, Gregory (Nov 17)
- Re: Deepfreeze - Why not? Mclaughlin, Kevin (mclaugkl) (Nov 17)
- Re: Deepfreeze - Why not? Allen Wood (Nov 17)
- Re: Deepfreeze - Why not? Sam Stelfox (Nov 17)
- Re: Deepfreeze - Why not? Chuck Keeler (Nov 17)
- Re: Deepfreeze - Why not? Mark Monroe (Nov 17)
- Re: Deepfreeze - Why not? Heath Barnhart (Nov 17)
- Re: Deepfreeze - Why not? Gibson, Nathan J. (HSC) (Nov 17)
- Re: Deepfreeze - Why not? Rob Whalen (Nov 17)
- Re: Deepfreeze - Why not? Mclaughlin, Kevin (mclaugkl) (Nov 17)
- Re: Deepfreeze - Why not? Michael Sana (Nov 17)
- Re: Deepfreeze - Why not? Schoenefeld, Keith P. (Nov 17)
- Re: Deepfreeze - Why not? Ryan Hiebert (Nov 17)
- Re: Deepfreeze - Why not? Dave Koontz (Nov 17)
- Re: Deepfreeze - Why not? Mclaughlin, Kevin (mclaugkl) (Nov 17)
- Re: Deepfreeze - Why not? Crary, Gregory (Nov 17)