Re: Computer lab security

[Michael_Maloney <Michael_Maloney () MIDDLESEXCC EDU>]

The great thing about Deep Freeze is it does a great job at rebooting the PC
back to the configuration it was when it was locked down..

The bad thing is you can't automatically update Anti-Virus definitions or do
remote or automatic patch installations.  Once the PC reboots, any updated
def's or patches are erased.  This played havoc when we got Welchia in the
labs, as soon as Welchia patched the system and caused it to reboot, it
would get reinfected again at restart..

We use  Deep Freeze and Fortres here. It works out pretty good for us, some
students have figured out how to bypass Fortres and Deep Freeze but for the
most part they do a really good job.  Fortres won't work in your scenario,
last I checked, logging in as administrator disables it.

Mike


********************************************
Mike Maloney
Sr. System Engineer
Middlesex County College
2600 Woodbridge Avenue
Edison, NJ 08818
Phone: 732-906-7754
Cell: 908-217-2086
Fax: 732-906-4266
Email: Michael_Maloney () middlesexcc edu
********************************************
-----Original Message-----
From: Ted Frohling [mailto:tsf () MS TELCOM ARIZONA EDU]
Sent: Thursday, April 01, 2004 5:20 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Computer lab security

Good day,

We have been having rather severe problems in our open computer labs with
the recent spate of viruses/worms.  The lab folks use a combination of Ghost
and DeepFreeze.  They also allow each user to be a local administrator on
PCs running a mixture of Windows2000 and XP!

What are others doing to lock down their computer labs?

thanks,

ted



--
     Ted Frohling (TF30-ARIN)                   The University of Arizona
     520.621.4834              Assistant Director           CCIT Room 126
     tsf-at-Arizona.EDU      CCIT - Network Services        PO Box 210073
     www.Telcom.Arizona.EDU/tsf                     Tucson, AZ 85721-0073

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.