Re: Retiree email

["Fugett, Julie C" <jcf () KU EDU>]

Per our exchange administrator, we are assigning the stand-alone exchange plan 2 for faculty licenses. So email only, 
no OneDrive, Office, etc.

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Kimmitt, Jonathan
Sent: Monday, January 25, 2021 11:02 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Retiree email

Hi all,

  The response from Will sparked a question that has come up several times here at TU.... What MS license do you use 
for your Retiree and/or Emeritus faculty?   Do you use the A1 free 'student' license, or do you have a full license 
that you count in your total FTE numbers?  Or something different?

  We currently allow retirees email for life, and emeritus faculty are considered full time faculty.....  We do require 
Microsoft MFA for all accounts in office365 and federated services... we also require mfa for anybody that us still 
using the Google apps for education accounts......

-Jonathan



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Telfer, Will
Sent: Monday, January 25, 2021 10:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Retiree email


  1.  Do you keep them in your primary email system/tenant (Exchange, O365, GSuite, etc)?
     *   Yes, but they receive a different MS license than a current Faculty/Staff member (at least this is my 
understanding)
  2.  If you keep them in your primary system/tenant, do you require them to use MFA (assuming you require it for your 
active community)?
     *   We require MFA via Duo of all current students, faculty/staff, & retirees now (retirees were the last group to 
be added to the MFA requirement)
  3.  Do you change their address, i.e. add "emeritus" or "retiree" to the email domain?
     *   No, the only change to an email address happens for students after graduation/a period of inactivity as a 
current student - once the email domain has changed for these folks, MFA is not enforced anymore.


Thank You,
Will Telfer, M.S.
Information Security Analyst
Information Technology Services

Follow BaylorITS & look for the #BearAware:
Twitter: @BaylorITS
Facebook: facebook.com/BaylorITS
Website: baylor.edu/BearAware

[BU_e-signature]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Boyd, Daniel
Sent: Monday, January 25, 2021 10:19 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Retiree email



For those of you who provide retirees email (if anyone else is crazy enough to do so besides us), I have some questions:

  1.  Do you keep them in your primary email system/tenant (Exchange, O365, GSuite, etc)?
  2.  If you keep them in your primary system/tenant, do you require them to use MFA (assuming you require it for your 
active community)?
  3.  Do you change their address, i.e. add "emeritus" or "retiree" to the email domain?

We're getting to the point where we are about to activate MFA on retirees and emerita and the apprehension of trying to 
teach some of these users how to use MFA has our support teams on pins and needles, so we're looking for alternatives.

You are welcome to reply directly to me or to the list.

Thanks,

Dan


Daniel H. Boyd (94C)
Director of Information Security
Office of Information Technology
Information Security Advisory Group Chair
Berry College
Phone: 706-236-1750
Web: 
https://infosec.berry.edu<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Finfosec.berry.edu%2F&data=04%7C01%7Cjcf%40KU.EDU%7C40fcff506f73433e658f08d8c152fb7f%7C3c176536afe643f5b96636feabbe3c1a%7C0%7C0%7C637471909447339835%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=tRMGxlj9pM9HT8g3ApnPZbSbsTAuOgYdHvVqHQ5dtUA%3D&reserved=0>
 & 
https://berry.edu/oit/information-security<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fberry.edu%2Foit%2Finformation-security&data=04%7C01%7Cjcf%40KU.EDU%7C40fcff506f73433e658f08d8c152fb7f%7C3c176536afe643f5b96636feabbe3c1a%7C0%7C0%7C637471909447349825%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=P14h1C8KTUp0O%2FIg4a12lMGz7Ju34k5yHm8UnTzd0NE%3D&reserved=0>

There are two rules to follow concerning your account passwords:
1. NEVER SHARE YOUR PASSWORDS WITH ANYONE (EVEN OIT!!!!)
2. If unsure, consult rule #1

Information Security wants to know what you want to know about! If there is a topic within information security you 
would like to know more about please let me know using any of my contact information above.





**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjcf%40KU.EDU%7C40fcff506f73433e658f08d8c152fb7f%7C3c176536afe643f5b96636feabbe3c1a%7C0%7C0%7C637471909447349825%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=PKRat4IDpAc99eQQnZ9VpfSLisafMd5VIXbFH6LO%2Fqg%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjcf%40KU.EDU%7C40fcff506f73433e658f08d8c152fb7f%7C3c176536afe643f5b96636feabbe3c1a%7C0%7C0%7C637471909447359822%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=B%2BbqP2XWNzbzMshqTyuRibn5FBRp%2F8lR3xMTsX2ii9I%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjcf%40KU.EDU%7C40fcff506f73433e658f08d8c152fb7f%7C3c176536afe643f5b96636feabbe3c1a%7C0%7C0%7C637471909447369817%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=KLle2yCJRT2ut0%2BJgaY%2FtjPDvlLpLC%2FyZMn0rH7uhMo%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community