Educause Security Discussion mailing list archives

[no subject]


From: "Timothy J. Fairlie" <fairlie () RIDER EDU>
Date: Wed, 1 Jul 2009 13:12:04 -0400

We assign them directory accounts (we don't use AD), so that they can
log into the student portal and check the status of their application,
make payments etc.
We reserve the username in email, but do not create the actual account.



Tupker, Mike wrote:
Hello,

A situation has developed where a project lead/developer and a few
departments are saying we need to give active directory accounts and
email accounts to applicants. I was wondering if other schools give
active directory and or email accounts to applicants?

The situation scares me to be honest. None of the details have been
worked out that I know of, but the idea of giving email accounts to
anyone who fills out a form online seems like a bad idea. It may be
possible to lock down AD enough, but it still sounds like we are
saying "Sign this internet form and get a login to our network. Have
fun elevating privileges and sending spam!" I may be being paranoid
about this but I wanted to get some of the community's thoughts on
this. If I'm just being paranoid, feel free to say so. J

Oh, and we also use google apps for our student email. It appears that
the google apps for edu agreement does allow for giving account to
non-students if desired.

Mike Tupker
Systems Administrator
Mount Mercy College



--
Timothy J. Fairlie
Director, Network and Communication Svcs
Rider University      fairlie () rider edu


Current thread: