Re: Rights

["Saqib Ali" <docbook.xml () gmail com>]

educational institutions tesnd to be more laxed when it comes to
security of Faculty members' computers. I worked at a university with
10,000+ Faculty+Staff and most of them had administrative access to
their machines.

Faculty member need/want to have more control over their machine. If
try to take that away, they purchase their own computer from the grant
money. I have seen this many times.

I would recommend a approach that give your faculty member more
control over their PCs but not administrative priveleges. May be
Protection Manager from Winternals will help:
http://www.winternals.com/Products/ProtectionManager/Default.aspx

You might also want to post this question on the University Security
Ops Group (UNISOG):
Archive: http://www.xml-dev.com/lurker/list/unisog.en.html
subscribe: http://www.dshield.org/mailman/listinfo/unisog




On 6/28/06, I Freecycle <i.freecycle.too () gmail com> wrote:
> Hello,
>
> I'm wondering how others deal with allowing users rights on work computers.
>
> At our school, users aren't normally given Administrator or Power User
> rights unless it's absolutely necessary.&nbsp; Occasionally we
> encounter employees and students that don't understand how easily a
> system can be messed up and the security issues involved nor why we
> feel it's necessary to operate like this.
>
>
> I would like to know what others do, and what policies they have in
> place to address these issues.
>
> Thanks,
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------