Re: virtual machines

[Patrick Goggins <pgoggins () CARROLLU EDU>]

Users in our environment are normal users within active directory and do not have permissions to install any of the 
virtual environments. The only virtual environments which can be run is parallels for the Macs. While this is always a 
potential risk I would see a greater chance of this not only happening but problems occurring from it stemming from 
student computers. Students in general have full admin on their computers, are more technically knowledgeable with 
virtual environments, and have a large amount of time on their hands.

~Patrick

Patrick Goggins
Network Administrator
Carroll University

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ozzie 
Paez
Sent: Monday, March 22, 2010 9:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] virtual machines

I would be curious to know if anyone has actually encountered problems with this issue,
Ozzie Paez
SSE/SAIC
303-332-5363

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Drake, 
Craig
Sent: Monday, March 22, 2010 8:49 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] virtual machines

I am not sure if anybody has mentioned this on this list before or not.

I was wondering if anybody is doing anything to control/restrict virtual machines running on users computers?  This 
could be a potentially very dangerous situation with users running rogue virtual machines on their office computers.  
They could essentially install anything they want in a virtual machines or bring infected virtual machines from offsite 
onto our faculty/staff/admin networks.  They could get around any restrictions we place on our physical desktop/laptop 
computers.  With the ability of NAT'ing these virtual machines through the host machine's network connection, it would 
be very difficult to track them down if there is a problem.

Thoughts?

Craig Drake
Senior Systems Administrator
Network and Distributed Services
Northeastern Illinois University
Phone: (773)442-4386
Email: c-drake () neiu edu
[cid:image001.jpg@01CAC9A6.5190AAF0]