Waterloo Nexus Advisory Group minutes May 19, 2004

Present

Rules of Domain Admin

• UserID conversions

Access to Nexus test domain

• Requested by Shawn M. granted by Hon T.

Exchange 2003 server

• Vulnerable - Paul Martin Man. Sci.
• Used for:
  • calendaring
  • business flow
  • web-based email
• High license fee (all potential users)

Nexus login page

• Paul McKone has completed a mockup of the new login page
• Suggestion to store 'tags' in AD based on OUs
• Based on University of Waterloo Gold Standard
• Department/Faculty info to be on the right of the screen

Mywaterloo issues

• If there are issues, send info to Bruce C. (userid, password, browser ver., faculty etc.)
• Deleting emails still an issue given the imap protocol, imap version on the various mail servers is different thus leading to issues
• Quotas issue: when a user is over quota, they cannot delete messages to get under quota
• Attachments do not always attach or send
  • Bruce C. to change upload sizes and monitor the attachment problem
• SMB files to be mountable through mywaterloo - Paul McKone is working on this

Clipper

• Hon T. has been unable to update to SAV 8.0 for clipper

DHCP

• For W2000 servers the zone for the subnet is added into the registry
• For W2003 servers the zone is not added in to the registry, hence leases are not issued
  • Hon T. has been in contact with Microsoft and is awaiting a solution
• FreeBSD has been setup in AHS in the interim

Printing accounting (XAS)

• Paul Snyder (ist) is working on the conversion from CAS to XAS, this is to be done in F2004
• Campus-wide printing will be the result
• Imperative that the transition be transparent to the end-users
• Bruce C. to make the necessary changes to XAS in preparation for the conversion

Exam lockdown (Erick E.)

• Working on starting applications automatically
• Works in conjunction with hardware in Engineering
• Risks
  • Run As
  • Saving 'cheat' files on desktop, or N: drive, webpage
• Priviledges on workstations needed to configure (OU)
• Created IE popups can give instructions to the student

Application monitoring service (Erick E. & Daniel Delattre)

• Designed to get the path information of the application that is being run, how much time the app. has been on the screen and the cpu usage
• To be used for planning in the student lab i.e. WordPerfect
• Students to be tracked via OUs
• For faculty computers to be used to:
  • tell when users/hackers remotely access the workstation
  • detect break-ins
• Logs to be rolled over on a weekly basis
• Bruce C. to send a 'snapshot' of computer useage across the faculties to wnag members
• Any application run by a !! account is to be logged to a central server
• Application Monitoring Service to work in tandem with Cerberus
• Configuration to be determined by each Faculty
• Privacy Issues of the Staff/Faculty, not for students
• Strategy for deployment to be discussed, smaller working group from within wnag to be created
• wnag to prepare scenarios and subsequently get directive from UCIST
• Communication is the key for deployment in the Faculties, ie. we are not snooping, anonymous
• Logs to be collected by a central server and sent to the respective Faculties
• Equivalent of a 'User Firewall' (Steph S.)