...
Computer-specific support services
Computers managed by Chemistry IT have certain characteristics or limitations, most of which are inherent to the tools we use and the need to control staff costs.
The chart below represent the minimums required for a system to be on a Chemistry IT network and for it to receive the standard service level support from Chemistry IT. Exceptions are possible through an agreement by Chemistry IT, in balance with the concern being addressed.
| Standard configuration's attribute | Reason for attribute | Instances when attribute is a problem | Options |
|---|---|---|---|
| System is on a secured network, trusting devices on that network. | Enables trusted access to network services and protects systems on a shared network by preventing initiation of off-network access. | System has server-like functions | eduroam, AccessNet, or RedNet |
| System is automatically restarted when required by OS and application updates managed by vendor, CIT, A&S IT, or Chemistry IT. | Some updates, particularly Windows monthly MS patching, require restarts to complete. | Systems in the middle of data collection or computational processes. | Spectrum of options, informed by risks, needs, technological capabilities, and human factors. |
| System has a fixed, standardized name. | This requirement stems from CIT managing a university-wide service (Active Directory), and does not come from Chemistry IT. | A vendor-provided computer may not permit a change in its name. | ? |
| Characteristic or limitation | Why it exists | Consequence to group | Why this might matter to you |
|---|---|---|---|
| Computer is in Active Directory | Enables accounts using NetID credentials and use of other AD accounts automagicallyauto-magically. This reduces local password management and recovery. Is required or makes more efficient use of other management tools, below. Facilitates inventory via a central and automatic collection of OS and other information. | Each computer has a fixed, standardized name. This requirement stems from CIT managing a university-wide service, and does not come from Chemistry IT. | A vendor-provided computer may not permit a change in its name. |
| Computer has system management software and associated configurations. | Installed system management software makes inventory information available to Chemistry IT staff via centralized tools. | Hopefully nonce since passive and does not collect any data within files. | Software not legally licensed may be detected. Out-of-date and/ or insecure software may be detected. |
| Computer has scanning software to identify sensitive data such as social security numbers. | To help users of computers comply with university expectations that certain types of private information of others do not reside on their computers. | Algorithmically interprets data within files to guide user towards suspected personal information for them to consider removing. | |
| Computer has scanning software to scan for malware. | Malware detection is reported to Chemistry IT staff via centralized tools. | ||
| Computer is configured to | |||
...