[no subject]

[Dan Oachs <doachs () GAC EDU>]

Like many of the other responses, we too create a very limited account 
for some applicants.

I believe in our case we create an account for all students who have 
been accepted ( much more limited than all applicants so that makes it 
easier for us) so they can log in to resources and see what other 
paperwork they have not finished filling out etc. The accounts begin as 
a username/password in a separate OU in ldap and are set up to forward 
email to the address they gave on their application. Then once we 
receive a deposit, we move their account to a full student account and 
remove the email forward.

The initial accounts are locked down enough such that they can only 
access the limited resources that they need. Hopefully we did it all 
right such that they can't get to anything we don't want them to get to 
and they can't spam anyone :)

--Dan Oachs
Gustavus Adolphus College



Tupker, Mike wrote:
> Hello,
> A situation has developed where a project lead/developer and a few 
> departments are saying we need to give active directory accounts and 
> email accounts to applicants. I was wondering if other schools give 
> active directory and or email accounts to applicants?
> The situation scares me to be honest. None of the details have been 
> worked out that I know of, but the idea of giving email accounts to 
> anyone who fills out a form online seems like a bad idea. It may be 
> possible to lock down AD enough, but it still sounds like we are 
> saying “Sign this internet form and get a login to our network. Have 
> fun elevating privileges and sending spam!” I may be being paranoid 
> about this but I wanted to get some of the community’s thoughts on 
> this. If I’m just being paranoid, feel free to say so. J
> Oh, and we also use google apps for our student email. It appears that 
> the google apps for edu agreement does allow for giving account to 
> non-students if desired.
> Mike Tupker
> Systems Administrator
> Mount Mercy College

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature