From: John Hascall (john@iastate.edu)
Date: Fri Jul 23 2004 - 11:49:35 CDT
> > We have been having a philosophical discussion in-house about how to
> > tell if a machine (lets talk Windows for the moment) is really
> > up-to-date on patches, and has anti-virus software installed.
> > For the sake of discussion, we are interested in Windows machines
> > that are owned by our students and are not part of our Active
> > Directory domain. We use Sophos anti-virus, but detecting other
> > anti-virus products would be cool too.
> Only through some local agent like SMS or third-party. Requiring
> students to install some piece of s/w is fraught with all kinds of
> support and privacy issues, but in some cases it might be worth it.
This is what we are planning on doing this fall.
Our 10.11 addresses are only allowed to route to a few machines
to try to keep them safe, then as a part of our NetReg-alike process
if the user is a student and if the machine is windows, we make
them download an agent which when they run it checks for:
needed service packs
needed hotfixes
autoupdate being on
virus software install and properly config'd
weak passwords
and reports them back to our system and then
we point them to how to correct their problems
and then when it gives a clean bill of health
they can complete registration.
John
**********************************************************************
To unsubscribe from this list, send an e-mail message to
majordomo@southwestern.edu containing a single line with the words:
unsubscribe netreg
Send requests for assistance to: owner-netreg@southwestern.edu
**********************************************************************
This archive was generated by hypermail 2.1.4 : Thu Aug 12 2004 - 12:01:47 CDT