PC Manager Meeting February 23, 2005
Today Updates Next Meeting Windows Policy Security This Month: Lessons Learned: Building the Symantec Patch (Andy Romero) Windows Policy Committee Website Changes (Jack Schmidt) Calendar Futures: New Meeting Maker Products (John Bellendir)
Next Meeting March 23rd ???? April 27 th Securing IE (Joe Klemencic)
Windows Policy Winpol-meeting list Next Meeting 3/2, 1:30-2:30, WH5SW OU for GPOs
Security Security Awareness Day: March 8 th ! Watch your mail for an official invite Patch Symantec! Verify Web Server Exemptions! Machines with bootleg copies of an OS are NOT allowed on the FNAL network!
Main Topic Lessons Learned: Building the Symantec Patch Andy Romero
Updating Symantec AV Options Visit Desktop Symantec Tool Script - deploy via Logon, PatchLink, SMS, Startup
Startup Script Setup Comp Config\WindowsSettings\Scripts Max Wait Time for Group Policy Scripts Run Startup Scripts Visible (debugging) Comp Config\AdminTmplts\System\Scripts Apply ACL to GPO to control who gets the deployment Apply GPO to OUs Make sure computer accounts have access to scripts and MSI files. (SPN....)
Issues Turn off SAV removal password Turn scheduled scans off during deployment Don’t tell MSIEXEC to FORCEREBOOT Timing issues Multi-version uninstall issues
Main Topic Windows Policy Committee Website Changes Jack Schmidt
WinPol Website Uses KX.509 Certificates l/getcert.zip l/getcert.zip Install in a top level directory with no spaces in the name! Desktop shortcut to Get-Cert.cmd Expired certificates can cause viewing problems! Demo!
Main Topic Calendar Futures: New Meeting Maker Products John Bellendir
Meeting Maker Server Consolidation Currently have 7 server databases One database (one server) would make it easy for users to login Meeting Maker recommends no more servers than the machine has processors for optimal performance Database maintenance would be easier for the server admin Will Scale better with future Meeting Maker products
LDAP Integration Password resets would be done by the helpdesk Resources are created by the helpdesk New account creation occurs when new users are added to Active Directory Username and password are the same as the users and Instant Message logon information
Demos Meeting Maker Client Meeting Maker Web Outlook Snap-in
fini….