Adam, Thanks for all this great information. From the sounds of the responses I've received I'm in a bit of uncharted territory so all the information I've gotten has been helpful in getting me pointed in some direction whereas before I wasn't sure what the "right things" to do were.
I'll investigate the insurance angle with our business office people to see what's involved with that as well as create a liability agreement. We sort of already have one for the projectors and digital cameras that we loan out to students to present and record their teaching so it might need a bit more tweaking to fit the laptop parameters. My curiosity is definitely peaked about Find My Mac and maybe utilizing it as a way to erase data remotely when necessary. I already have my own personal account associated with my @berkeley.edu email address (this was back in the day when setting up Apple ID accounts was by email address and it was the only one I had -- I hadn't joined the Google bandwagon yet) so I'd probably have to create another one. I understand what you mean about a shared Apple ID, for example, I was thinking about using our departmental account gseem...@berkeley.edu, but it is shared by another colleague as it is our unit email address. The quandary is that it would be prudent to share the Apple ID in case something happens to me or I retire and that way my colleague could continue to monitor so I'm hoping that it would be okay to use that. Last question, if I were to buy these laptops through CSS procurement, I am assuming that they would have the Casper image, TEM and Druva (I'm hoping this will achieve the necessary backup process needed as we don't have a way to do over the net backups here) as well. Are there any "protections" that CSS would provide or would that security aspect (specifically a Find My Mac-like system, not the cables and docks) be localized to us? Thanks for your understanding and help about these questions. I want to do best practices as much as possible upfront, but acknowledge I may need to fill in gaps or adjust procedures and set ups as needed. I welcome others on Micronet to continue chiming in. I appreciate all of the feedback. Beth On Fri, Apr 3, 2015 at 3:40 PM, Adam Grimaldi <agrima...@berkeley.edu> wrote: > Good afternoon Beth (and all) > > So, in terms of docks, I've helped a handful of people with Elgato docks, > to great success: > https://www.elgato.com/en/thunderbolt/thunderbolt-2-dock > > Of course, I'm also still a fan of just a thunderbolt display. > http://www.apple.com/displays/ > > They may be expensive, but boy are they nice. > > In terms of your questions about theft, find my Apple, etc: > > *Campus liability document?* I do not believe so. Or at the very least, I > have not encountered such a thing across the many laptops I've deployed > across multiple buildings and departments. > > *Laptop Insurance?* That's entirely up to you. These things do get > stolen. I had a client just this week have her laptop swiped off a coffee > table in a coffee shop in SF WHILE actively working on it. I kid you not. > > *Find My Mac & Apple IDs?*: There is indeed a "Find my iPhone" feature > for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta > CSS-IT in general) discourages a shared Apple ID. Mainly because if someone > changes the password, it breaks ALL of them. Bad news. Instead, my Zone > (and again, sorta CSS-IT) instead advises creating a personal Apple ID with > your Berkeley Email. You can actually create one without a credit card too. > (I can go into that more, if you like) From there, just login and turn it > on. > > *Other Security?*: If you're feeling uneasy, I highly suggest turning on > Filevault. Especially if you are dealing with sensitive data. When you turn > it on, be sure to document all the passwords and such, otherwise you will > be profoundly screwed if/when something does wrong. Still, it's built-in > HDD encryption. > > I also suggest, if possible, keeping a small inventory of the apple > laptops in your possession. Make / Model / Serial. That way if it gets > stolen, you have something to give to the police. > > I hope that helps. > > Adam Grimaldi > CSS-IT Zone 5 Team Lead > Business/Tech Support Analyst 3 > agrima...@berkeley.edu (Best way to reach me) > Cell: 1 (510) 612-9036 (Okay way to reach me) > Office: 1 (510) 664-7290 (I am rarely in my office - keep that in mind) > > > Campus Shared Services IT > http://sharedservices.berkeley.edu > https://kb.berkeley.edu/ > > ------------------------------------------------------------------ > Ticket Request Options: > 1. https://shared-services-help.berkeley.edu/ > 2. Call 664-9000, option 1, then option 4 > 3. Email *itcssh...@berkeley.edu <itcssh...@berkeley.edu>* > ------------------------------------------------------------------ > > On Fri, Apr 3, 2015 at 3:06 PM, Baril <rb...@berkeley.edu> wrote: > >> You might want to check out this link. Great product! >> >> http://www.landingzone.net/ >> >> Best, >> >> Roy >> >> >> On 4/3/2015 2:58 PM, Beth Muramoto wrote: >> >> As always, please bear with the lengthy and likely extraneous >> explanation: >> >> >> We are noticing a trend among staff requesting laptops with external >> monitors for use as their primary computer versus the standard desktop. >> They are attending more meetings and instead of taking notes and >> transcribing them when they get back to their offices, they want to be able >> to type everything then and there. >> >> We don't have a budget for letting them have both a desktop and a >> laptop, but understand the need that the laptop would fulfill. My thoughts >> stray to the "good old days" of docking stations. I forgot the Apple laptop >> that had that available. So I guess this is really something whose time has >> finally come for us. >> >> However, I know that there are a LOT of things to consider like from a >> security standpoint, liability issues, insurance etc. >> >> I've listed the kinds of questions I'm wrestling with (and if anyone >> has other things I need to think about, please do mention them if I haven't >> considered them or have forgotten to mention them here) and I want to tap >> anyone who might have already gone through this kind of process and what >> steps did you take to ensure some of the "dangerous ground" that we'll be >> treading. >> >> I have considered some of the security issues such as logging into the >> computer both when turning on the computer as well as when it sleeps, >> locking them away in locked drawers or locked offices when leaving the >> office or use a cable lock to secure them to the desks, creating an admin >> account for me as IT (to control installs etc.), a standard login for the >> user (we already do this with the desktops to meet campus security >> standards), and considering the potential for someone taking the laptop >> home and needing VPN to access online services, >> >> Here are questions I don't have an answer to and would love to have >> some guidance on. >> >> Have any of you or does campus have liability document that the user >> has to sign for situations of loss, destruction or theft? >> >> Should we insure these laptops for replacement in case of loss, >> destruction or theft? >> >> Is there a way to implement Find My Mac (forgot to mention that they >> will be Macbook Pros) on the laptops to track lost laptops and erase data >> remotely? If so, would I have to use my personal Apple ID account or can I >> create a "departmental" one with an iCloud account that would give me this >> ability? >> >> >> This is a really big step and I want to make sure I cover all of the >> specific pitfalls and security measures for going this route and I realize >> that I'm probably not thinking about how to cover every consequence. >> >> Any help or suggestions are welcome and as always appreciated. >> >> Beth >> >> >> >> -- >> *********************************************** >> Beth Muramoto >> Computer Resource Specialist >> Graduate School of Education >> University of California, Berkeley >> 1650 Tolman Hall >> Berkeley, CA 94720 >> Email: mailto:bmura...@berkeley.edu >> Phone: (510) 643-0203 <%28510%29%20643-0203> >> Fax: (510) 643-6239 <%28510%29%20643-6239> >> >> “Finish each day and be done with it. You have done what you could. Some >> blunders and absurdities have crept in – forget them as soon as you can. >> Tomorrow is a new day. You shall begin it serenely and with too high a >> spirit to be encumbered with your old nonsense.” >> -Emerson >> >> This is the essence of forgiveness. You can't change what happened but >> you can make sure it doesn't have the power to prevent you from being happy >> tomorrow. >> >> -Paul Boese >> >> “Kind words do not cost much yet they accomplish much.” >> >> -Blaise Pascal >> >> >> *********************************************** >> >> >> >> >> ------------------------------------------------------------------------- >> The following was automatically added to this message by the list server: >> >> To learn more about Micronet, including how to subscribe to or unsubscribe >> from its mailing list and how to find out about upcoming meetings, please >> visit the Micronet Web site: >> http://micronet.berkeley.edu >> >> Messages you send to this mailing list are public and world-viewable, and >> the list's archives can be browsed and searched on the Internet. This means >> these messages can be viewed by (among others) your bosses, prospective >> employers, and people who have known you in the past. >> >> ANNOUNCEMENTS: To send announcements to the Micronet list, please use the >> micronet-annou...@lists.berkeley.edu list. >> >> >> -- >> Roy A. Baril >> Director of Technology >> Graduate School of Journalism >> University of California >> 121 North Gate Hall >> Berkeley, CA 94720510-643-9215 -- Work510-643-9136 -- Fax925-352-9543 -- Cell >> >> >> >> ------------------------------------------------------------------------- >> The following was automatically added to this message by the list server: >> >> To learn more about Micronet, including how to subscribe to or >> unsubscribe from its mailing list and how to find out about upcoming >> meetings, please visit the Micronet Web site: >> >> http://micronet.berkeley.edu >> >> Messages you send to this mailing list are public and world-viewable, and >> the list's archives can be browsed and searched on the Internet. This >> means these messages can be viewed by (among others) your bosses, >> prospective employers, and people who have known you in the past. >> >> ANNOUNCEMENTS: To send announcements to the Micronet list, please use the >> micronet-annou...@lists.berkeley.edu list. >> >> > -- *********************************************** Beth Muramoto Computer Resource Specialist Graduate School of Education University of California, Berkeley 1650 Tolman Hall Berkeley, CA 94720 Email: mailto:bmura...@berkeley.edu Phone: (510) 643-0203 Fax: (510) 643-6239 “Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.” -Emerson This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow. -Paul Boese “Kind words do not cost much yet they accomplish much.” -Blaise Pascal ***********************************************
------------------------------------------------------------------------- The following was automatically added to this message by the list server: To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site: http://micronet.berkeley.edu Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet. This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past. ANNOUNCEMENTS: To send announcements to the Micronet list, please use the micronet-annou...@lists.berkeley.edu list.
