Amen. We're working toward that end on faculty and staff machines, but not on the student lab machines. Students need to be able to do anything on the machines but reboot and it's back to a known state. Deep freeze does that nicely. Now that AV and updates are on them, we'll be in better shape. Not perfect but that's one of the pitfalls of working in edu.
-----Original Message----- From: Phil Brutsche [mailto:p...@optimumdata.com] Sent: Tuesday, March 10, 2009 3:50 PM To: NT System Admin Issues Subject: Re: Account lockouts I suspect many of your problems would be eliminated by strictly adhering to the principle of least privilege. Glen Johnson wrote: > I feel your pain. > We're just now getting past it. > We had 200+ lab machines w/o AV and latest patches. Said machines have > deep freeze so they didn't stay infected after reboot but seems like > every day a new one would get infected and spread. > We're in the process of isolating each lab via vlans and have added AV > and updates. Even got a nightly maintenance schedule working so > hopefully were in a much better position next week when students return > from spring break. > Hope you get all the mess cleaned up. > BTW, we did end up reloading a couple machines as they didn't have > freeze so the infection was permenant. -- Phil Brutsche p...@optimumdata.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
