Re: home computers on the domain

["Jacobson, James" <JJACOB () MIDWESTERN EDU>]

We do not allow home computers on our trusted networks for many reasons:


  *   By its very nature, the device is untrusted and any setup/configuration was not done by our IT office.
     *   We have no idea what type of software/hardware may be on the machine, intentional or not.
     *   We do not want to become liable for any network traffic traced to that machine. The untrusted machine is now 
using the University’s network for traffic that could have adverse consequences for the University if that traffic is 
deemed ‘bad’ (spam, malware, bot, etc.).
     *   Home machines have a variety of software and software packages.  Many home machines do not have up to date 
antivirus software or patches.
  *   We do not want to address any liability issues should the machine fail while attached to our network.  We do not 
want to become responsible for someone’s personal machine if it breaks.
  *   We also do not want to address office politics/jealousy over someone’s personal machine (why do they get what 
they want and I can’t….)

To counter this, we ensure that all employees have access to a University computer (may be a shared machine depending 
on the nature of the position).  We also have a loaner pool available to employees who may be traveling or have other 
needs to use a computer outside of their normal office environment.  If they do bring in their own portable device, 
they can only connect it to our untrusted network (guest/student network) and they are not allowed to use it for 
business purposes per policy.

James Jacobson
Information Technology Services
__________________________________________________________

[Description: Description: Description: mwuseal (Custom)]Midwestern University

From: Mark Reboli <mreboli () MISERICORDIA EDU<mailto:mreboli () MISERICORDIA EDU>>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Date: Monday, March 2, 2015 at 2:28 PM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [SECURITY] home computers on the domain

Does anybody let employees bring computers to work that they then add that computer to the domain? Why/why not?

Thank you

m

[Description: MU Arches]
Mark Reboli
Network/Telcom Manager
Misericordia University
(570) 674-6753