Educause Security Discussion mailing list archives
Re: Lab Computers, Research & Administrative Rights
From: "Menne, Michael S" <michael.menne () MNSU EDU>
Date: Wed, 6 Jun 2018 14:13:26 +0000
We use a product from Faronics called DeepFreeze. It keeps the machine in a steady state. Students, Faculty and Staff can have Administrative rights to the lab computers as long as DeepFreeze is loaded and enabled. If the computer gets compromised (which hasn't happened very often), the computer is rebooted and the computer is clean again. DeepFreeze allows for thaw periods (we set it for 2am-6am) so that patches can be applied. For shared department computers, we do not allow administrative rights for students unless there is a request and a valid need. We have a few pieces of "lazy" software that require administrative rights. In most cases, the software is just looking for permission to a directory that is otherwise restricted without administrative rights. Michael Menne, CISSP Chief Information Security Officer IT Solutions Information Security Minnesota State University, Mankato Phone: (507) 389-5705 www.mnsu.edu/its/security Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. -----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Hahues, Sven Sent: Wednesday, June 6, 2018 9:08 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Lab Computers, Research & Administrative Rights Hi everyone, I wanted to find out if some of you could share what some of the approaches you have taken when handling shared computers, such as devices used in labs that are hooked up to research equipment where faculty/staff and students may need to have administrative rights. We have been in the process of removing administrative rights, and if the computer is loaded by central IT, students do not have administrative rights. We have been getting an increasing number of requests to allow for this to happen and are hesitant to do so. Could you guys share some of your approaches? Thanks, Sven Sven Hahues Florida Gulf Coast University Director, ITS Helpdesk, Network Services & Security Tel: (239) 590 1337 E-Mail: shahues () fgcu edu
Current thread:
- Lab Computers, Research & Administrative Rights Hahues, Sven (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Menne, Michael S (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Michael Schalip (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Kevin Ledbetter (Jun 06)
- Re: Lab Computers, Research & Administrative Rights O'Callaghan, Daniel (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Barton, Robert W. (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Dan Wasson (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Ronald King (Jun 12)
- Re: Lab Computers, Research & Administrative Rights Dan Wasson (Jun 06)
- Re: Lab Computers, Research & Administrative Rights Menne, Michael S (Jun 06)