PC Manager Meeting

1
PC Manager Meeting

• February 23, 2005

2
Today

• Updates
• Next Meeting
• Windows Policy
• Security
• This Month
• Lessons Learned Building the Symantec Patch
  (Andy Romero)
• Windows Policy Committee Website Changes (Jack
  Schmidt)
• Calendar Futures New Meeting Maker Products
  (John Bellendir)

3
Next Meeting

• March 23rd
• ????
• April 27th
• Securing IE (Joe Klemencic)

4
Windows Policy

• Winpol-meeting email list
• Next Meeting 3/2, 130-230, WH5SW
• OU for GPOs

5
Security

• Security Awareness Day March 8th!
• Watch your mail for an official invite
• Patch Symantec!
• Verify Web Server Exemptions!
• Machines with bootleg copies of an OS are NOT
  allowed on the FNAL network!

6
Main Topic

• Lessons Learned Building the Symantec Patch
• Andy Romero

7
Updating Symantec AV

• Options
• Visit Desktop
• Symantec Tool
• Script- deploy via Logon, PatchLink, SMS, Startup

8
Startup Script Setup

• Comp Config\WindowsSettings\Scripts
• Max Wait Time for Group Policy ScriptsRun
  Startup Scripts Visible (debugging)Comp
  Config\AdminTmplts\System\Scripts
• Apply ACL to GPO to control who gets the
  deployment
• Apply GPO to OUs
• Make sure computer accounts have access
  toscripts and MSI files. (SPN....)

9
Issues

• Turn off SAV removal password
• Turn scheduled scans offduring deployment
• Dont tell MSIEXEC to FORCEREBOOT
• Timing issues
• Multi-version uninstall issues

10
Main Topic

• Windows Policy Committee Website Changes
• Jack Schmidt

11
WinPol Website

• https//plone3.fnal.gov/WinPol/
• Uses KX.509 Certificates
• http//pseekits.fnal.gov/desktoptools/fnal/getcert
  .zip
• Install in a top level directory with no spaces
  in the name!
• Desktop shortcut to Get-Cert.cmd
• Expired certificates can cause viewing problems!
• Demo!

12
Main Topic

• Calendar Futures New Meeting Maker Products
• John Bellendir

13
Meeting Maker Server Consolidation

• Currently have 7 server databases
• One database (one server) would make it easy for
  users to login
• Meeting Maker recommends no more servers than the
  machine has processors for optimal performance
• Database maintenance would be easier for the
  server admin
• Will Scale better with future Meeting Maker
  products

14
LDAP Integration

• Password resets would be done by the helpdesk
• Resources are created by the helpdesk
• New account creation occurs when new users are
  added to Active Directory
• Username and password are the same as the users
  email and Instant Message logon information

15
Demos

• Meeting Maker Client
• Meeting Maker Web
• Outlook Snap-in

16
fini.