Desktop policies

Desktop computer security policies

Applies to ALL computers connecting to the university network irrespective of device ownership

Antivirus: All computers must have an approved, functioning, and up to date antivirus software. Antivirus software must be set to auto update virus definitions daily. Antivirus software for campus and home use is available for download.

Manual logoff or lock - When leaving a computer, server, personal digital assistant, or other computing device unattended, workforce members must manually logoff or lock the device to prevent unauthorized access to University systems or information. (more information)

Automated logoff or lock - All computing devices that contain or access sensitive information must be secured with either a password-protected screen saver or automatic logoff that will take effect after no more than 10 minutes of inactivity. (more information)

Compromised or virus infected computers must have their university network connection disabled to prevent spread of infection or illegal activities. (more information)

Security patching: All computers must have an automated procedure for maintaining current patch levels. All applicable critical security patches must be installed within 48 hours of patch release by the vendor. (more information)

MS operating system security support: All computers using Microsoft operating systems must use vendor supported versions to insure the availability of security patches. (more information)

Current versions supported by MS are:

XP Pro SP2

Unsupported or non AD compatible operating systems:

Windows 2000 Professional Edition
- Mainstream Support ended 6/30/2005
ME
- Mainstream Support ended 12/31/2003
MS Windows 98

Mainstream support ended 6/30/2002

Windows NT Workstation 4
- Mainstream Support ended 6/30/ 2002
MS Windows 95
- Mainstream Support ended 12/31/2000
See MS Product Lifecycle Information for more information on MS Windows desktop product lifecycles.

Supporting documents: Virus response policy