Distributed Computing Support
Management Team


Meeting Minutes

October 17, 2003

Members
Joe Adamo (Computing and IT Center), Troy Bacon (AVP Finance and Business Affairs and Controller), Craig Berry (School of Visual Arts), Ginger Boone (University Union), Allen Bradley (Computing and IT Center), Sandy Burke (Computing and IT Center), Tim Christian (College of Arts and Sciences), Chu Chuah (School of Community Service), Wil Clark (UNT System Center @ Dallas), Jim Curry (Microcomputer Maintenance/Classroom Support Services), Cyndie Harris (UNT Facilities), Mike Hatch (College of Business Administration), Pamiela Hight (UNT Libraries), Elizabeth Hinkle-Turner (Student Computing Committee, Computing and IT Center),  Paul Hons (College of Education), Abraham John (VP Student Development), Scott Joyce (Universities Center at Dallas), Kirk Kelly (Housing), Brenda Kirk (Computing and IT Center), Maurice Leatherbury (Chair, Executive Director of Information Technology and Academic Computing), Mike Maner (Computing and IT Center), Gary Mathews (School of Library and Information Science), Dallas Newell (Registrar's Office), Bruce Pollock (ABN LAN Mgmt), Chris Strauss (Computing and IT Center), Brad Varcoe (Police Department), Mike Wright (Computing and IT Center), Roy Zumwalt (Texas Academy of Math and Science)

Members Present
Troy Bacon (AVP Finance and Business Affairs and Controller), Craig Berry (School of Visual Arts), Ginger Boone (University Union), Sandy Burke (Computing and IT Center),  Tim Christian (College of Arts and Sciences), Chu Chuah (School of Community Service), Wil Clark (UNT System Center @ Dallas), Mike Hatch (College of Business Administration), Pamiela Hight (UNT Libraries), Elizabeth Hinkle-Turner (Student Computing Committee, Computing and IT Center),  Paul Hons (College of Education),  Kirk Kelly (Housing),  Brenda Kirk (Computing and IT Center), Maurice Leatherbury (Chair, Executive Director of Information Technology and Academic Computing), Mike Maner (Computing and IT Center), Gary Mathews (School of Library and Information Science), Chris Strauss (Computing and IT Center)

Guests
Richard Anderson (Computing and IT Center), Philip Baczewski (Computing and IT Center), Travis Brown (Computing and IT Center), Jim Byford (ABN Support), Lisa Faia (Microsoft), Dan Glass (Computing and IT Center), Attila Hakimoglu (Computing and IT Center), Judy Hunter (Libraries), Robert Jones (Computing and IT Center), Scott Joyce (Universities Center at Dallas), Krysta Kaye (Libraries),  Matthew Kernan (Computing and IT Center), Jason Myre (Computing and IT Center), Charlotte Russell (Computing and IT Center),  Dennis Scroggins (Computing and IT Center), Yoke Teo (Computing and IT Center), DJ Washington (Microsoft), Mike Williams (Computing and IT Center), Scott Windham (Computing and IT Center), David Wright (College of Education).

Approval of Minutes
Minutes from October 3, 2003  were approved with corrections.

Patch Management Subcommittee Report
Rich Anderson reported that the Patch Management subcommittee had not met but members have been working.  Axton Grams and Lee Haughton evaluating SMS, Dan Glass and Rich are evaluating Languard and NHF Netcheck Pro.  The group will meet again on Wednesday.

New Computer Support Personnel Orientation Subcommittee 
Tim Christian reported that the Computer Support Personnel Orientation subcommittee is working on documentation and web links.  A meeting will be scheduled soon.

Campus Outage Notifications
Chris Strauss provided documentation diagramming the work flow of outage and bulletin notifications.   Philip Baczewski set up the UNT CSO (campus system outages) listserv (no members at present).  Helpdesk tickets with urgency of 20+ people out-of-service or critical security issues will get a popup dialog asking for confirmation of the notification to the UNT-CSO listserv.  When the Remedy ticket gets resolved another message will go out to the listserv.  When ticket is closed a notice will go out to list.  

Chris proposes that something similar be done for Change requests. DCSMT agrees that the CSO listserv should also be notified when outages are downgraded.  For security reasons, only summary and description information will be included in the notification. 

The following is a summary of changes and procedures for listserv notifications:

Help Desk Case (unplanned outages) notifications:

Change Request (planned outages) notifications:

Bulletins with additional notification to UNT-Netman:

Microsoft Briefing
Lisa Faia and DJ Washington, representatives of Microsoft, briefed DCSMT on the Software Assurance program, Microsoft security initiatives, training, and new products.  Lisa is UNT's account manager, and DJ is a technical adviser.  

The Software Assurance program provides maintenance for products covered under the MOLP and the campus agreement licenses.  Benefits include automatic updates, automatic upgrades and access to the new E-Learning library (software training).  All products included in the campus agreement and MOLP are included in the E-Learning library.  Training materials are for beginners and professionals.  Lisa will contact Maurice with more information about training.  (Mike Wright can register UNT for this free service and can also administer rights to the service.  See www.microsoft.com/education/softwareassurance for more information.)

Microsoft is focused on operating a secure environment.  Some of the initiatives include mandatory training of technical support staff, code reviews, third party penetration testing, use of automated code tools, a re-designed IIS 6.0 architecture, new patch management tools, official Microsoft curriculum courses, official security configuration guides, integrated security tools, reverse-engineering of patches and post exploit code, collaboration to repair vulnerabilities, building a community consensus that disclosure is not good, working with law enforcement agencies, and assisting with technical forensics work.

DJ announced that Microsoft will release non-emergency patches on a monthly release schedule in order to allow for planning of a predictable monthly test and deployment cycle.  Monthly releases will give hackers less of an opportunity to exploit vulnerabilities because of a predictable schedule.   Emergency patches will be deployed immediately.

Note: Support for Windows 2000 SP2 and Windows NT SP6a will be extended through June of 2004.

Manuals for security guidance and tools are available.  Later this year and throughout 2004, more prescriptive and how-to guides will become available.

Microsoft recommends conducting enterprise security audits and development of a defense-in-depth security plan with prescriptive guidance (for the perimeter, network, hosts, applications, data, policies and procedures).

You can send e-mail to DJ if you want to be included on an internal security list that goes out before public notices are distributed.  (DCSMT members can contact Charlotte Russell for the e-mail address.)

Microsoft's roadmap includes a significant number of upgrades, feature adds, and new products coming in the future.

Old Business
None.

New Business
None.

Status Reports
None.

The meeting adjourned at 12:00 p.m.

 


Return to Distributed Computing Support Management Team Home Page.

Page last modified on November 20, 2003.  Send comments to Maurice Leatherbury.