Re: Remote Desktop Policies

["Basgen, Brian" <bbasgen () PIMA EDU>]

 Our policy requires that the end-user consent before a remote session is initiated.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Brian Basgen
Information Security Office
Pima Community College
Office: 520-206-4873
~~~~~~~~~~~~~~~~~~~~~~~~~~~~


From: "Webb, Justin" <justin.webb () MARQUETTE EDU<mailto:justin.webb () MARQUETTE EDU>>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Date: Tue, 21 Dec 2010 12:43:38 -0700
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [SECURITY] Remote Desktop Policies

Hi All:

                We are in the process of reviewing our policies regarding Remote Desktop and I am curious how other 
institutions are handling this. Do you allow it at all, or with qualifications (must be VPNed in), and do you use a 
software suite (Citrix, e.g.), or RDP (or VNC,  the like)? Also, do you require some sort of sign-off before access is 
given, from a supervisor, or the employee themselves? Lastly, do you use RDP for remote support and allow local admin 
access to the machine? Thanks in advance.

Sincerely,

Justin P. Webb, GCIH
Security Analyst
IT Services, Marquette University
414-288-4196
justin.webb () marquette edu<mailto:justin.webb () marquette edu>