The purpose of these policies is to set a standard for central control of systems resources and proper computer access security precautions.

Password Policies

• Turn on Password Complexity Rules
  - Upper & lower case plus a non-alpha character
  - Passwords must be a minimum of 8 characters
• Passwords must be changed every 90 days
• Can’t use the same password for 3 passwords  

PC Security Issues

• Turn on the OS Firewall on all machines
• Set group policy to lock machine and require authentication after 15 minutes of inactivity
• Group policy control of OS updates

Known Spyware/Applications to Block via Group Policy

• Weather Bug
• All IE Toolbars (except Google Search)
  - Google Search toolbar will be added to the base PC image as standard install
• All desktop control applications such as Webshots, Google Desktop, etc.

Disk Quotas

• Need to set quotas for each user and each group
• University standard issue – 500 MB (User) – 1GB (Shared)
  - Additional disk space can be allocated by special request ether at a user or department level when used for Academic or Administrative purposes as part of normal university operations.
• The following file types will NOT be allowed to be stored on the network drives unless required for academic purposes (classroom Instructional content):
  - .pst, .avi, .wav, .mp3, mpeg, avi, iso, .vob, all other video/audio files

Revision History
1 August 2006, Original Draft
15 September 2006, ITP&S Modif. for recommendation to VPITC
3 October 2006, VPITC Approved