Location: MC-1058. Time: 9:30AM - 11:AM.

Previous items resolved

  • Erick shares news about the Nexus Client Machine Backup Option (NCMBO).
  • As agreed to, we will be moving to the new nexus management model for the new term.
    Please use your departmental account for everything possible now, always using it first before resorting to your bang bang account, so we can find any remaining problems before the cutover. (Erick Engelke, 8 Jan 2005)
  • Changes to Nexus Active Director
    1. All GPOs have to be moved to the ownership of the people who should own the
    2. All workstations have to give permissions to the people selected by your department to have write access.
  • Windows XP SP2 to be installed on Nexus client machines via SUS for the start of next term.

Current items

Erick

  • Would another day be better?

Hon

  • Syncronizing SUS servers and its software.

Nevil

  • Would like to hear about the compromise, the slow logons, any new issues or updates on issues regarding peoples experience with the new !!privileges.

    Luckily, some machines, particularly our Nexus core servers, were running all the security features I have made available.

    This alerted us within seconds, and before the intruder could do anything. We know what was done on those machines and when! The same cannot be said for the hacked workstations, which appear to be numerous stations within one or possibly two departments.

    Also, *some* of the attacked workstations were running my security features, but not all of those machines, and not all of the services.

    The services cover various features, and also cover each other, so that you cannot disable one without triggerring another. This is a familiar approach in physical security systems, and a good design for computer security too. (Erick Engelke, 11 Jan 2005)

Stephen Carr

  • suggest a review of progress on "harmonizing of methods and procedures amongst the faculties" (my concern is w.r.t. user procedures for seting up accounts, changing passwords, etc.).

Tim

  • Suggest that the person who would like the meeting time changed (one-time) be responsible for securing the new time and resource (room). Don't forget to include the resource MC1058 if you want the meeting there.