1. PC Manager Meeting February 23, 2005

2. Today Updates Next Meeting Windows Policy Security This Month: Lessons Learned: Building the Symantec Patch (Andy Romero) Windows Policy Committee Website Changes (Jack Schmidt) Calendar Futures: New Meeting Maker Products (John Bellendir)

3. Next Meeting March 23rd ???? April 27 th Securing IE (Joe Klemencic)

4. Windows Policy Winpol-meeting email list Next Meeting 3/2, 1:30-2:30, WH5SW OU for GPOs

5. Security Security Awareness Day: March 8 th ! Watch your mail for an official invite Patch Symantec! Verify Web Server Exemptions! Machines with bootleg copies of an OS are NOT allowed on the FNAL network!

6. Main Topic Lessons Learned: Building the Symantec Patch Andy Romero

7. Updating Symantec AV Options Visit Desktop Symantec Tool Script - deploy via Logon, PatchLink, SMS, Startup

8. Startup Script Setup Comp Config\WindowsSettings\Scripts Max Wait Time for Group Policy Scripts Run Startup Scripts Visible (debugging) Comp Config\AdminTmplts\System\Scripts Apply ACL to GPO to control who gets the deployment Apply GPO to OUs Make sure computer accounts have access to scripts and MSI files. (SPN....)

9. Issues Turn off SAV removal password Turn scheduled scans off during deployment Don’t tell MSIEXEC to FORCEREBOOT Timing issues Multi-version uninstall issues

10. Main Topic Windows Policy Committee Website Changes Jack Schmidt

11. WinPol Website https://plone3.fnal.gov/WinPol/ Uses KX.509 Certificates http://pseekits.fnal.gov/desktoptools/fna l/getcert.zip http://pseekits.fnal.gov/desktoptools/fna l/getcert.zip Install in a top level directory with no spaces in the name! Desktop shortcut to Get-Cert.cmd Expired certificates can cause viewing problems! Demo!

12. Main Topic Calendar Futures: New Meeting Maker Products John Bellendir

13. Meeting Maker Server Consolidation Currently have 7 server databases One database (one server) would make it easy for users to login Meeting Maker recommends no more servers than the machine has processors for optimal performance Database maintenance would be easier for the server admin Will Scale better with future Meeting Maker products

14. LDAP Integration Password resets would be done by the helpdesk Resources are created by the helpdesk New account creation occurs when new users are added to Active Directory Username and password are the same as the users email and Instant Message logon information

15. Demos Meeting Maker Client Meeting Maker Web Outlook Snap-in

16. fini….