Photos with Instant Messaging/E-Mail

["Webb, Justin" <justin.webb () MARQUETTE EDU>]

Hi Everyone,

                I am curious to hear community thoughts on what would essentially amount to a photo directory of all 
Faculty/Staff at a University. Microsoft Lync allows the import of photos which are attached to an Active Directory 
account. So when that user IMs another person, or sends an email, their photo as well as name are attached. 
Additionally, your photo shows up in your list of contacts in Lync, which is essentially like AOL Instant Messenger. 
Type anyone's name in, and you see their current status, photo, and name/title (etc, etc).
                I see some potential security issues if this was University-wide. A disgruntled employee or student 
would more easily be able to target a particular person they were unhappy with, because their identity/likeness would 
be discoverable. Additionally, a system like this provides presence information - so, not only do you know what someone 
looks like, but you can tell if they are still at work, on the phone, busy, etc...This goes back to the Facebook type 
scenario, where you are updating your page constantly, and tipping off a robber that you are out of town for the 
weekend.
                How much information is too much? Would you only allow other Faculty/Staff to see employee photos, or 
would you be OK with students seeing them as well?
Additional Thoughts?
                (and, obviously to avoid FERPA issues, photos would not be associated with student AD accounts)

Thanks!

Sincerely,

Justin P. Webb, GCIH
Security Analyst
IT Services, Marquette University
414-288-4196
justin.webb () marquette edu<mailto:justin.webb () marquette edu>