Campus Technology Day

1
Campus Technology Day Desktop Updates
Review Meeting the Campus Security
Requirements September 25, 2003
2
Desktop Updates Review Meeting the Network
Security Requirements

• Campus Security Requirements Chris Manriquez
• Domain / OU Overview Changes Chris
  Manriquez
• OU Administrative Rights Brian Alonzo
• McAfee Anti-Virus Review - Chris Thompson
• Hot Fixes / Patch Updates Chris Abelardo
• Application Updates Matt Ahola
• QA

3
Desktop Updates Review Meeting the Network
Security Requirements

• Administrative Accounts for IT Security Group
  scanning patching
• Password minimums for duration, length, and
  complexity
• Technical and Administrative Contacts for
  network devices
• Installation and Update of critical service
  packs, hot fixes, and anti - virus

4
What Must I Do ?

• Critical OS And Application Updates
• Operating system and application critical
  patches must be installed and updated regularly.
  Minimums required for the latest patch are
  minimums required on the network.
• Update Expert and McAfee Anti-Virus are
  available for installation on campus
  workstations.
• GPOs available for use on qualified systems.

5
AD Domain Services - Existing
Servers are members of the Server OU.
6
AD Domain Services New (10/03)
Servers are members of the Server OU.
7
ACAD Domain Services - Existing
No Domain Policies
8
ACAD Domain Services New 10/03
Domain Policies for Passwords Domain Updates for
critical patches
9
OTHER Domain Services (until 7/04)
10
OU Administrative Rights
Brian Alonzo
11
What are Requirements for Getting OU Rights?

• Full Time Permanent 12 month employees
• Typically Unit 9
• Able to be contacted 24x7
• Registered as technical contact

12
What Rights Will I Get in AD?
A usernameadmin account will be created with
rights in your OU under both ACAD and AD.

• AD Domain Rights Local OU
• Create/Delete Workstations
• Create/Delete Printers
• Create/Delete Shared Folders
• Create/Delete/Apply Group Policies
• Create/Delete Users and Groups will be requested
  through Information Technology

13
What Rights Will I Get in ACAD?
A usernameadmin account will be created with
rights in your OU under both ACAD and AD.

• ACAD Domain Rights Local OU
• Create/Delete Workstations
• Create/Delete User accounts
• Create/Delete Printers
• Create/Delete Shared Folders
• Create/Delete Security Groups
• Create/Delete Group Policies
• Reset Passwords
• Create/Delete OUs
• Create/Delete Child objects
• Ability to delegate control over sub containers

14
McAfee Anti-Virus Review
Chris Thompson
15
What are McAfee Anti-Virus 7.0 System
Requirements?

• 166MHz Pentium, 32MB RAM, and 45MB open space
• CD ROM or internet connection
• WinNT4 with SP6 or 6a
• Win2k Pro with SP 1, 2, or 3
• Windows XP Home and Pro with SP1
• Windows 98 systems must use version 4.51

16
How Can I Get McAfee Anti-Virus in AD?

• Rollout OU included on the campus image
• Campus OU pushed through the domain
• Local OU available through EPO install online
  at http//www.fullerton.edu/it/helpdesk/work-av-i
  nstruct.htm
• Servers OU - available through EPO install
  online at http//www.fullerton.edu/it/helpdesk/se
  rver-av-instruct.htm

17
How Can I Get McAfee Anti-Virus in ACAD?

• Campus OU pushed through the domain
• Local OU available through EPO install online
  at http//www.fullerton.edu/it/helpdesk/work-av-i
  nstruct.htm
• Servers OU - available through EPO install
  online at http//www.fullerton.edu/it/helpdesk/se
  rver-av-instruct.htm

• In OTHER Domains (until 07/04)
• Software is available through EPO install online
  at http//www.fullerton.edu/it/helpdesk/server-av-
  instruct.htm

18
How is McAfee Anti-Virus Updated?

• Each Wednesday night updated virus definitions
  are downloaded from NAIs website to the ePO
  server
• ePO server replicates updates to ADSELECT
• Clients check for latest updates on ADSELECT
  every morning at 830.
• Servers OUs with EPO are updated the same way
  except when version upgrades requiring a systems
  restart occurs.

19
McAfee FAQs
Q I have a computer that is incompatible with
McAfee antivirus, or I would prefer to use
another antivirus product. What should I do? A
Email helpdesk_at_fullerton.edu and we will create
an exception for you so that ePO/antivirus is not
pushed to your machine. It will be your
responsibility to find an alternative antivirus
solution. Q Can I use the campus package on
ADSELECT for my home computer? A The campus
package has been specially designed for use with
the campus network. If you need antivirus
software for your home computer copies are
available for home use through emailing
softwarerequest_at_fullerton.edu.
20
Update Expert Review
Chris Abelardo
21
What are Update Experts System Requirements?

• PII 450 MHZ or better processor
• 128 MB Ram or better
• 500 MB - 1 GB Free Disk Space
• Windows NT 4.0 or better Operating System

22
How Can I Get Update Expert to Update my
workstations?

• At this time to qualify computers must be
  connected to the campus network, in ACAD or AD,
  and must conform to the Network Security
  Standards and Practices
• At this time licensing exists solely for Rollout
  workstations. In October licensing will be
  available to manage other campus workstations at
  NO COST to departments .
• Schedule a meeting with Desktop Services to
  discuss and formulate a plan for your systems.
• You will need to provide the system names,
  locations, and 24x7 contact information for you.

23
When campus licensing is complete where will
Update Expert be available?

• AD Domain OUs
• Rollout automatically included w/ GPOs
• Campus will automatically included w/ GPOs
• Local available for updates
• Servers - NOT AVAILABLE

• ACAD Domain OUs
• Campus automatically included w/ GPOs
• Local available for updates
• Servers NOT AVAILABLE

24
How does Update Expert Update Workstations?

• UE queries the systems on the network against a
  database of MS hot fixes and patches.
• Hot fixes are placed on workstations and run
  locally with a Q-chain process.
• Rollout workstations users are reminded weekly
  to RESTART their workstations when leaving
  Thursday afternoon.
• Non-rollout workstations will be set for a
  different date. ANY SUGGESTIONS?
• Urgent updates will be done at any time following
  net send notification.

25
Software Applications Review
Matt Ahola
26
Software Applications Now Available

• Assigned (Mandatory) Software Released
• MS Office XP Pro
• Executive Software Diskeeper 7.0
• Timbuktu 5.1
• Internet Explorer 6.02
• Informed Filler 3.5
• Advertised (Optional) Software Released
• Brio Query 6.6
• MS Publisher XP
• MS Windows Media Player
• P-Card
• UAM

27
Software Applications for Fall 2003

• Assigned (Mandatory) Software in Fall
• Spybot Anti-Spyware Software
• Executive Software Diskeeper 8.0
• MS Windows Media Player 9.0
• Advertised (Optional) Software Released
• Other software titles as they become available

28
Software Applications FAQs
Q How can I install and manage software on our
department purchased computers? A You can
either do this manually by selecting software on
ADSELECT or requesting cds from
softwarerequest_at_fullerton.edu . Or by creating
GPOs or using the IT GPOs in your locally
managed OU. This software has been tested on
rollout models of workstations, but not on any
others.
29
QUESTIONS ??