To:                   Deans, Directors, Faculty and Staff

From:              Bill Junor, Director of Computer Services

Subject:           Workstation Administration Policy

Date:               August 1st, 2005

The security and integrity of the College’s computer systems and data network is our collective responsibility. As we increasingly rely on electronic forms of communication and access to information, we must ensure its security and protect our network against ever more sophisticated threats. A single weak machine that is not adequately patched and maintained can wreak havoc with the college’s network, interfering with administrative operations and disrupting access for thousands of people on campus.

Windows XP: The PCs in offices and computer labs throughout the campus are purchased and owned by the College. The college’s standard operating system, Windows XP, contains security features that require you to log on before you can use the PC.  All software running on college-owned machines must be legally purchased and approved by CIS before installation. All College employees receive “User” accounts that allow them to run all software on the machines, but does not allow them administrative rights to modify system settings or install other software. Secure administrative access to XP workstations is retained by CIS (or by Lab Managers in the case of the College’s distributed computer labs). The college is using Windows XP and domain-wide Group Policy settings to centrally manage these machines and ensure that security patches are applied and that anti-virus profiles are up to date.  Windows XP also dramatically improves the Helpdesk’s ability to troubleshoot and repair problems remotely when you run into difficulty.

Retirement of Windows 98: Windows 98 has now been officially retired by Microsoft, and no further security patches are being issued. While W98 was plagued by security problems from the beginning, the cessation of security patches makes it imperative that it be retired from our network immediately. Our logs show that there are still a few machines running W98 on our network. Network access to these machines will be disabled as of August 22nd 2005, and any machine still running W98 will have to be either upgraded or replaced. If it is a P-III 500Mhz machine or better, it may be possible to upgrade it – but a brand-new desktop machine can be purchased from dell for about $604. In rare cases of severe hardship, it may be possible to provide a refurbished machine or a loaner.

Please call the Helpdesk at 251-6465 if you have any questions or if you need assistance.