The Office of Information Technology

ITA/ISA Monthly MeetingDecember 12, 2013

Facilitator: Matthew MarrOIT Support Services Manager - Academic Support

The Office of Information Technology

ITA / ISA Meeting AgendaDecember 12, 2013

Attendees: ITA’s, ISA’s and OIT representativesLocation: University Center Mesquite Room (UC 2.01.24)Date and Time: Thursday, December 12, 2013 - 3:00pm – 4:30pm

This month we will review the SCCM client push, then discuss the process change for updates and patching.  Next, we will hear about OIS updates, then dive into Network Access Control and Identity Finder.  Following that, we will have a quick refresher on UM and Box.  Then, we have a quick update on PrintSpot. Finally, we will close out with an open discussion/Q&A session.

The Office of Information Technology

Agenda Items Presenter Time Allotted

Update on Configuration Manager 2012 Client Push Frank Maniscalco / Harold MeyerOIT Support Services - Managed Solutions 5 min

Process Change for Updates and Patching via Configuration Manager 2012

Frank Maniscalco / Harold MeyerOIT Support Services - Managed SolutionsLance Pritchard - Office of Info Security

20 min

Office of Information Security General Updates Lance PritchardOffice of Information Security 5 min

Overview of Network Access Control and Identity Finder

Brad Cooper / Alex WardOffice of Information Security 20 min

Quick Update on Box and Unified Messaging Brent LeagueOIT Infrastructure Services 10 min

PrintSpot Update James LeeStudent Computing Services 5 min

General Updates / Open Discussion Matthew MarrOIT Support Services - Academic Support 10 min

The Office of Information Technology

SCCM Client

Software Store

Virus Protection:System Center Endpoint 2012

Imaging:Task Sequence

Critical Patching:WSUS incorporated into SCCM 2012

SCCM: 2007 Conversion to 2012

System Center Configuration Manager 2012 Conversion

The Office of Information Technology

SCCM Client

SCCM: 2007 Conversion to 2012

SCCM 2012 Conversion: Client Push Update

• Conversion started November 18th, 2013• On track for February 2014 completion• Deployed to all targeted locations

• 5,584 computer machines transitioned (74% of total)

• Less than 1% failed to install 2012 client

The Office of Information Technology

SCCM 2012 Conversion: Imaging & Software

• SCCM 2012 Faculty/Staff Image available• New ISO Boot Image located at

\\Gemini\images2\SCCM2012BootDisk• Customized image creation available

Imaging:Task Sequence

• Released to OITSS Technicians November 2013• Software Store available for ITA/ISA Dec. 13th, 2013• 49 applications packaged and more to come!• http://coruscant/CMApplicationCatalog/Software

Store

The Office of Information Technology

SCCM 2012 Conversion: Virus Updates and Patching

• Windows Critical & Security updates now deployed via SCCM 2012

• OIT WSUS usage discontinued• 30 day window changed to 15 days forced update• InSight Patch Indicator review ongoing

• System Center Endpoint Protection 2012 deployed• Replaces FCS and FEP virus protection

applications• Updates 3 times daily (4 am, 12 pm, 8 pm)• 95.7 % - active client systems protected

Critical Patching:WSUS incorporated into SCCM 2012

Virus Protection:System Center Endpoint 2012

The Office of Information Technology

Office of Information Security General Updates

• Desktop Encryption

• Laptop Encryption

• Data Categorization

• Mobile Devices

The Office of Information Technology

Office of Information Security Network Access Control

General Implementation Process (Slide 1)

• Discovery (IPAM, DHCP, InSight, ARP Tables, etc.)

• Two-week email notification to building occupants

• One-week email notification prior to deployment

• NAC team visit one-week prior to deployment

• Validate discovery data and get MAC addresses

• Inform and answer questions

The Office of Information Technology

Office of Information Security Network Access Control

General Implementation Process (Slide 2)

• One-day email notification to specific floor/area prior to deployment

• Deploy GPO to configure Windows 7

• Deploy NAC at approximately 6:00 a.m.

• NAC team monitoring and onsite to address issues

• One-day email process repeated for each floor/area

• One floor/area flipped per day

The Office of Information Technology

Office of Information Security Network Access Control

Current Testing and Deployment

• Completed: OIS and UH4

• Up next: Remaining UH, BSA, OIT (after Holidays)

Campus-wide deployment starts February 2014

• Tentative schedule release in January 2014

The Office of Information Technology

Office of Information Security Identity Finder

Identity Finder (IdF) is a scanning program that searches for SSNs and CCNs similar to SENF, which has been used in the past.  In an effort to better protect this type of data, UTSA will be utilizing IdF to identify where sensitive data resides so data owners can better protect it.

Those Affected (not a campus-wide deployment)

• Computers with public-facing IP’s

• Faculty

• ADS and those individuals with access to critical databases

• Banner, PreProd, DataMart, VPAIE, etc.

• Category 1 computers from InSight

The Office of Information Technology

Office of Information Security Identity Finder

Responsibilities

• OIS will identify the computers that need scanning• ITA’s / ISA’s / Data owners can identify computers also

• Computer owners / Data owners will:

• Run Identity Finder (IdF)• Handle any sensitive data discovered

• If not needed, destroy it• If needed, secure it (I:\ drive, encryption, etc.)

• Justify keeping sensitive data• Run scans twice per month (initially)

More information will be provided

The Office of Information Technology

Office of Info Tech Communication Infrastructure Srvcs

Unified Messaging

• What is Unified Messaging?

• When will it be deployed?

• Testing within OIT to begin on December 18th, 2013

• Deploy campus-wide – February 10th, 2014

The Office of Information Technology

Office of Information Technology Infrastructure Srvcs

Box.com

• Box Features

• File synchronization between multiple computers – allows you to work offline

• Access via web browser – allows you to access files from any computer

• Share files or directories with anyone – whether they have a Box account or not

• Space allocation – will have 500TB of allocated space – quotas are undetermined at this point

• When will it be deployed? -- April 1st, 2014

The Office of Information Technology

Office of Info Tech Student Computing Services

PrintSpot Update

• New printers deployed between December 18th and December 20th

• How we transition to new print servers and devices?

• New print package will be necessary on PC’s and Mac’s

The Office of Information Technology

General Updates

• Meeting changes for Spring 2014

• Location – MB 0.312 and FS 2.518

• Day – 2nd Friday of every month (except March)

• Time – 2:00 p.m. to 3:30 p.m.

Questions and Answers