Articulating expectations and understanding to reduce surprises.
Glossary
Un-supported:
Supported:
Managed:
Q: What software is forced on a supported computer?
A: Only one enabling application: CM Client.
- KEY: No software is forced-installed (software that would be new to the computer) on Windows except the following, and only under specific circumstances:
| Software forced-installed | Circumstance | Notes |
|---|---|---|
| CM Client | Added when system added to CU AD | Non-issue, right? |
| Flexera CSI (Secunia) | Added when system added to (CIT?) Central Patching | If only gets installed if a system is added to CIT Central Patching, non-issue, right? |
| No other software is forced-installed! | Forced-installed should not to be confused with patching, action taken on pre-installed software. |
Q: What software is forced on a managed computer?
A: Only one more enabling application: Flexera CSI (Secunia)
Q: What software gets patched by Cornell?
A: None, by default.
Q: What software can get patched, if patching enabled?
A: Either a group of software or individual software gets patched, depending on configurations to enable specific needs.
Q: What software can be installed auto-magically?
A: Only software for which a Cornell IT group has created a "package".
Q: If software is installed
Either software for which either a Group Policy (GP) or Managed Desktop (MD)
| (1A) CU AD | (1B) CM client | CIT Central Patching | A&S Central Patching | Chemistry Central Patching | A la carte patching (CM) | A la carte patching: (GP) | A la carte installs (CM) | A la carte installs (GP) | |
|---|---|---|---|---|---|---|---|---|---|
| What service gets you or does: | Gets you CM client automatically (forced install) | Enables all other CM services, and depends on CU AD. | Patching ONLY if application already on system. A bundle. On CIT's schedule. | Patching ONLY if application already on system. A bundle. On A&S IT's schedule. | Patching ONLY if application already on system. | Patching ONLY if application already on system. | |||
| Pros of service: | Usernames are NetID and NetID passwords. Enables all other Chemistry IT management tools, including CM-related ones. | Enables other things, by default is passive. | |||||||
| Cons of service: | Enforced password strength. | Reports some hardware (applications?) data to CIT's servers (viewable by?) | |||||||
| How used in Chemistry It uses in supporting Research: | All supported Windows able to get on AD get this. | Thus, supported Windows able to get on AD get this. | Java patching | Java intalls. |
Snap-shot of a la carte patching targets:
| Application | Owner | Notes |
|---|---|---|
Snap-shot of a la carte installable applications"
| Application | Owner | Notes |
|---|---|---|
| SCEP | Chemistry IT | If SEP or other anti-virus software already installed, uninstalls that software first. Created by Michael Hint, and shared with the AS IT Science cluster.
|
| Others? |