[752] in winnt
Re: WinPartners
daemon@ATHENA.MIT.EDU (Bryant C. Vernon)
Wed Dec 5 09:56:31 2001
Message-ID: <3C0E3534.938670F8@mit.edu>
Date: Wed, 05 Dec 2001 09:54:44 -0500
From: "Bryant C. Vernon" <bcvernon@MIT.EDU>
MIME-Version: 1.0
To: Jay Copeland <ajc@mit.edu>
CC: winpartners@mit.edu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hi Jay,
Yes, you should send this type of email to the list. I have cc'ed my
reply to it.
Many administrators around campus have found the need to lock down the
computers for which they are responsible. I am sure that as a group we
can help you define policies and show you how to implement them so that
you can minimize users' ability to modify the system without minimizing
their ability to perform their computing functions.
Win2k workstations can be locked down regardless of whether they are in
a w2k or NT domain. Why don't you send a list to the group detailing the
level of security and control you would like to have over the users'
environment? I am sure we can work together to develop a security
template for your w2k workstations.
As for w2k domain controllers--yes, until Project Pismere is finalized
w2k domain controllers are not allowed (actually, I believe it is 99%
done--just administrative buy-in and agreement and other political
intricacies need to be worked out--but don't quote me on this one--and
this applies to the hundreds of people on this list)!
I hope this information helps.
All the Best,
Bryant
Jay Copeland wrote:
>
> Hello Bryant,
>
> I am a system administrator in the Department of Biology responsible for
> several NT 4 servers and about two dozen NT 4 Workstations and a growing
> number of Win2K Professional systems. Our environment is suffering from
> a lot of problems involving workstations becoming disfunctional over
> time due to user modifications. Regretably, I never implemented
> mandatory user profiles or system policies. Now with Win2K I now have to
> start looking into group policies. I am just beginning to get up to
> speed with all this and a big question has emerged. Can I implement
> Win2K group policies without a Win2K domain controller? I am assuming
> that for now Win2K domain controllers are prohibited from MITNet.
>
> Anyway, I thought the WinPartners group could help me out with these
> questions. I am planning to attent the 12/18 meeting. Is it possible to
> discuss these issues in advance of the next meeting with some
> knowledgable people? Should I use the discussion system?
>
> Thanks.
>
> --Jay
>
> --
> ================================================
> Jay Copeland, Research Scientist
> MIT Department of Biology, Koch Building, 68-371
> 77 Massachusetts Avenue, Cambridge, MA 02139
> phone: 617-452-2715 mobile: 978-501-0325
> fax: 617-253-8550 pager: 617-339-9381
> ================================================
