CalNetAD Planning Committee

March 4, 2004

Room 60, Barrows Hall, 2-3:30 PM

Updated: 03/25/2004

Agenda

1. Data Center Move (Arden)

2. Upgrade to Server 2003 (Eric)

3. Minimum Security Standards:

   1. Password changes every six months for private accounts (Eric)

   2. GPO to activate screen saver after 20 minutes (Eric)

   3. Unsupported OS versions not allowed to connect (Eric)

   4. GPOs to disable unnecessary services (Eric)

   5. Feasibility of publishing site-licensed AV and Firewall software (Eric)

4. Remote Access Server (RAS) and Internet Authentication Service (IAS) certificates (Eric)

5. Encrypted File Service (EFS) certificates (Eric)

6. Other Business

Notes

Data Center Move

Upgrade to Server 2003

Upgrade is scheduled to take place during the first three weeks of August, after the data center move and before the start of the fall semester.

Minimum Security Standards:

Group supported the idea of a baseline GPO applied to the domain that meet the minimum standards. Work on the standards would begin after the upgrade to Server 2003 and be in place by February 2005, when the minimum security standards go into effect.

Remote Access Server (RAS) and Internet Authentication Service (IAS) certificates

RAS/IAS certificates are used by Server 2003 RAS/IAS servers. CalNetPKI will issue the server certificate for $25 per certificate.

Encrypted File Service (EFS) certificates

EFS is available on a per OU basis. Each OU is responsible for recovery of EFS encrypted files. The is a $140 one-time setup fee. And $25 per EFS recovery certificate. Each OU will need two certificates. See Best Practices for the Encrypting File System for more EFS information.

Other Business

CalNetPKI SSL certificates are available for $25 per certificate. On 3/7/04, CalNetAD will have had 100% availability with no scheduled or unscheduled outages for two years.