Educause Security Discussion mailing list archives
[no subject]
From: "Beechey, Jim" <beechey () NORTHWOOD EDU>
Date: Wed, 1 Jul 2009 13:14:14 -0400
Mike We do so once the student has been accepted. From a security standpoint I'm ok with it, given the apparent benefits to the student (register for classes, prospective portal, etc) and the recruitment process. We have an OU dedicated to applicants. They are moved to the appropriate student OU once they attend and we have a very rigid process for cleanup of those who do not end up attending. As far as signing up just for the account, we really don't worry about that given the length of the app and data required to apply. Application fee wouldn't hurt either. My advice would be to try to nail down your admissions folks as to exactly when the best time in the process would be to give them an account (completion of app, accepted, committed). Another gotcha can be the increased licensing costs for things based upon domain user count such as administration tools, spam licensing, etc. Jim Jim Beechey Associate Director, Networks and Information Security Northwood University 4000 Whiting Drive Midland, MI 48640 From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tupker, Mike Sent: Wednesday, July 01, 2009 1:02 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Hello, A situation has developed where a project lead/developer and a few departments are saying we need to give active directory accounts and email accounts to applicants. I was wondering if other schools give active directory and or email accounts to applicants? The situation scares me to be honest. None of the details have been worked out that I know of, but the idea of giving email accounts to anyone who fills out a form online seems like a bad idea. It may be possible to lock down AD enough, but it still sounds like we are saying "Sign this internet form and get a login to our network. Have fun elevating privileges and sending spam!" I may be being paranoid about this but I wanted to get some of the community's thoughts on this. If I'm just being paranoid, feel free to say so. :) Oh, and we also use google apps for our student email. It appears that the google apps for edu agreement does allow for giving account to non-students if desired. Mike Tupker Systems Administrator Mount Mercy College
Current thread:
- [no subject] Beechey, Jim (Jul 01)