...
Computer-specific support services
Computers managed by Chemistry IT have certain characteristics or limitations, most of which are inherent to the tools we use and the need to control staff costs.
The chart below represent the minimums required for a system to be on a Chemistry IT network and for it to receive the standard service level support from Chemistry IT. Exceptions are possible through an agreement by Chemistry IT, in balance with the concern being addressed.
| Characteristic or limitation | Why it exists | Consequence to group | Why this might matter to you |
|---|---|---|---|
| Computer is in Active Directory | Enables accounts using NetID credentials and use of other AD accounts automagically. This reduces local password management and recovery. Is required or makes more efficient use of other management tools, below. Facilitates inventory via a central and automatic collection of OS and other information. | Each computer has a fixed, standardized name. This requirement stems from CIT managing a university-wide service, and does not come from Chemistry IT. | A vendor-provided computer may not permit a change in its name. |
| Computer has system management software and associated configurations. | Installed system management software makes inventory information available to Chemistry IT staff via centralized tools. | Hopefully nonce since passive and does not collect any data within files. | Software not legally licensed may be detected. Out-of-date and/ or insecure software may be detected. |
| Computer has scanning software to identify sensitive data such as social security numbers. | To help users of computers comply with university expectations that certain types of private information of others do not reside on their computers. | Algorithmically interprets data within files to guide user towards suspected personal information for them to consider removing. | |
| Computer has scanning software to scan for malware. | Malware detection is reported to Chemistry IT staff via centralized tools. | ||
| Computer is configured to | |||
All of these minimums should be required to be on a ChemIT network and receive standard support. Any exceptions only with agreement of ChemIT, which is not withheld without cause.
Manufacturer supported OS ( as of today Windows 7 or higher, OSX 10.10 and higher ) – this relates back to Cornell University Policy
All computers ( Windows, Mac, or Linux ) must be attached to Cornell’s Active Directory which means:
• Standardized computer name – This requirement comes from CIT, not ChemIT
• Windows PCs automatic installations/options by joining AD:
1. Installation of computer inventory and management software automatically on Windows PCs
2. Remote access to the machine by ChemIT automatically setup on Windows PCs
Macintosh machines must have ChemIT’s inventory and management software installed ( currently JAMF aka Casper ).
Users must run as non-administrators.
Levels of service for research groups
...