Updates:

CUIT forum - Rich and Sunny - planning for June 13th-14th time frame.

Vista Day review - discussion around converter for Office 2007 (does this just work for 2003?)

Security SIG update from Roger

Meeting Minutes:

Andrea Beesing:  NetID Provisioning and impacts

Susan Luckhurst & Aimee Decker: Update on password complexity - moving forward

Future possible topics:  Federated Identity Management

Updates:

Sunny - PDA sig forming

Vista sig- students coming back in August, CIT plans to be ready and ask that all locally owned applications be tested and Vista ready

Sunny - ITMC updates: daylight savings time

Jen - update on Campus Agreement for Microsoft Office

Security SIG update from Roger - Symantec support / client update discussed and notice to be sent to net admin list

Everyone in agreement that email send to netadmin doesn't also need to be send to CCD list.

Meeting Minutes:

Andrea Beesing & Diane Kubarek:  LDAP concerns

Discussion on advance search and filters.

Craig Adams & Geoffrey Yearwood & Clayton Dow: University Audit

Presentation and discussion around IT controls and how the Audit Office conducts an audit of those controls.

IT_Audit_Presentation.ppt

Meeting Minutes:

Greg Menzenski: CIT Unified Business System CUBS

Single bill for CIT's fee based services

CUBS.ppt      Handout

Jon Corson-Rikert - Head of IT services at Mann Library

Presentation and discussion around VIVO and virtual life sciences library.

J.P. Brannan:  Tier 2 support

Discussion of dedicated support channel by CIT.  J.P. asked CCDer's to consider what areas of training would be good for the 2nd level support providers.

Updates:

The Distributed IT forum is tomorrow 100 Caldwell 2:30 p.m. presented by Sunny Donenfeld.

The CCD Executive Committee wants to get a pulse from CCD's about email clients (Thunderbird, Exchange .. what are people using, what do people want to use / have the need for). 

Meeting Minutes:

Tracey Mitrano: Web Accessibility Policy

Discussion surrounding draft version of web accessibility policy and concerns raised regarding funding.

Andrea Beesing: Federated Identity Management

Discussion surrounding extending single sign-on to services hosted by external providers.

Kim Burlingame: CISER

Presentation about software package named Audit Wizard. CISER uses this software to inventory software and hardware.

Updates:

No June CCD meeting - CUIT Forum instead

Keith Boncek's last CCD Meeting - Thanks to Keith for all he's done!

ITMC - Sunny - IT Digest, Gmail/T-bird/google, CUIT Forum 6/13, update on MS Office Campus Agreement - still months away - draft to go to COG - suggest units consider their own CA or wait if they can.

Dell Bundle - Keith - popular select licenses up on site and most monitors removed from bundles, but you can still add-on.

Meeting Minutes:

Steve Schuster (Security) - Discussion pertaining to the Baseline and Private Data Guidelines

Al Gonzalez and Kate Mink (IWS) - Quality Assurance, what it is and why we should care.  When should you use Quality Assurance and who and when.  IWS can help with Vista / IE7 testing as well.

Dan Elswit - Security Awareness Program "Danger Internet Ahead!"

Please register http://itmc.cornell.edu/cornell_edu/ITMC/it_forum.cfm 

Discussion:

Discussion on upcoming agenda topics, review of the mission of CCD and recruitment of candidates for the upcoming Fall election.

Meeting location ok
Meeting time ok, we could possibly try another time slot for a couple meetings
Decided to create a CCD group in Oracle - giving people to option to opt out

Other topics discussed:
*E-payroll caching in browser
*Exchange strategies (email, calendaring - vision)
*Mobile device support
*Email for students
*Standard file server space
*CIT's onsite solutions
*Development on storage farms (backups and disk recovery)
*CTC restructure
*Document Management systems - what are people using across campus?
*CUDisk
*Active Directory at the University level
*Virtualization - is there a sig?
*Standard software acquisitions - Kevin Drake and Chuck Jessop continue to work     together on this. Adobe contract was discussed briefly. Sunny and Kevin want to include purchasing in the communication channel.
*Discussion surrounding communication from CIT, especially those saying contact your local IT provider.

Guests: Marty Kurth and Dean Krafft

Presentations: Digital Libraries

Guest: Linda Bryan (Cornell Libraries), Linda Croll-Howell (CIT)

Presentations: CCD Burnout Discussion, IT Worker Burnout

CCD nomination speeches: Dan Elswit, James VanEe

Discussion:

ITMC updates - Sunny Donenfeld

• Emergency planning: when this occurs in your unit, make sure IT is at table. Also if emergency planning calls for coordination with CIT, make sure CIT is involved in the planning process and that everyone is aware of expectations.
• ITMC presentations about IT in the units are online at ITMC site, http://itmc.cornell.edu/ , in the meeting minutes

Dell Roadmap

• Reminder - the November 14th meeting will be the Dell Roadmap event
• 9:00-12:00 in 423 ILR Conference Center
• All CCD, ITMC, and TSPs are invited
• RSVP to Jen Holleran (jeh46@cornell.edu)

Vista SIG

• The members of the SIG feel that the goals have been met, and there is little else to discuss
• Peoplesoft is still an issue with Vista
• All information about the work of the Vista SIG is on http://www.itmc.cornell.edu/cornell_edu/ITMC/SIG/Vista_SIG.cfm

Shadowing/mentoring program

• The ITMC Professional Development Committee is forming in order to develop shadowing and/or mentoring programs for IT staff at Cornell.
• If anyone is interested in helping out, they can contact Tammy Blasz (td13) or Sunny Donenfeld (sd94).

Presentations

Security Metrics (Steve Schuster)

• Overview
• Mark Scannapieco is carrying out the gathering and analysis of metrics
• Unit-specific metrics
• Interested in answering questions such as, "How much better is security getting?" For example, compare between areas using ACLs and areas without ACLs
• Collecting and analyzing such metrics in our environment is not easy. Expectations must reflect that.
• Mark is having to make some somewhat arbitrary decisions
• Some challenges include:
• IPs don't necessarily map to systems
• Networks do not tend to be segmented
• Lack of standards on campus
• Only 14-15% of university systems are properly registered
• Full data is only available for significant incidents that required full forensics procedures
• Data Acquisition
• Using percentages so that large units will weigh equally to small
• Acquiring data from Remedy, Network Quarantine, many other sources
• Units may be ranked. This has been helpful at other universities to drive security measures (units typically do not want a low ranking.)
• Specific rankings of other units would not be available, just the ranking of your own unit
• ITSO is using other universities as a benchmark to compare Cornell's overall security
• Notes on other universities' security
• Florida State monitors all traffic to look for copyrighted materials
• Stanford demands that all email systems must go through the central email system for proper AV handling
• Some universities have border firewalls
• Due to non-compliance with PCI DSS regulations, a major University was recently unable to process credit cards for 3 months

Campus Active Directory (Andrea Beesing)

• Phase I Goals
• Support 500 Exchange users for Day Hall
• Integration with Kerberos
• Automating the provisioning of AD objects
• Service ownership is moving to Identity Management
• A consultant has reviewed the current implementation to ensure compliance with best practices
• Identity Life Cycle Management
• Application that synchronizes data from SunOne to AD
• Supports automated provisioning of netids
• Participating units will not have to create users, they will be created automatically
• Sync runs daily after Sun directory is updated
• Netids deactivate in AD automatically when user's netid is deactivated (as in, when they leave)
• Integrated authentication with Exchange
• Authentication to Exchange from other domains has been problematic
• Currently passwords are synchronized between Kerberos and AD, which means that Kerberos passwords are stored in AD
• Fully functional parallel test environment that mirrors the production environment
• Supports SSL for transaction encryption
• A test of a bare metal restore has been carried out
• A security assessment by Steve Schuster's group has been carried out
• There are schema issues between SunOne and AD. One immediate challenge is the mapping of displayname in AD to Common Name in Sun. No straightforward mechanism for allowing a user-defined preferred name in this field.
• Next steps
• Cleanup
• Response to issues
• Exchange is still being rolled out
• Planning for Phase II, involving campus-wide AD as opposed to limited scope
• Special funding has been tentatively approved for Phase II
• Project initiation/risk assessment for Phase II
• Active Directory is integrated into the roadmap for authentication on campus
• Exchange is not currently in that plan
• Decision on migrating entirely to an AD environment (eliminating MIT Kerberos, for example) has not been seriously discussed

Discussion:

Announcements

• The campus agreement on Microsoft Office 2007 Enterprise is nearly completion, as Sunny Donenfeld's recent email explained. This agreement will provide access to the product for faculty and staff on the Ithaca or Geneva campuses. Other Cornell locations should check with Sunny Donenfeld or Jen Holleran.
• In order to make better use of people's time, the monthly meetings between Polley McClure and the CCD Executive Committee have been changed. Rather than having a standing monthly meeting, we'll have two standing meetings, one in Spring and one in Fall, and then meet with Polley on an as-needed basis at other times. The Fall meeting with Polley will also include CIT management and the whole CCD group, and will consist of a 2-way Q & A session. Polley has made it clear that if CCD has need to meet with her at other times, she will make the time available.

ITMC updates - Sunny Donenfeld

• With the Microsoft agreement under way, and other campus agreements with computing vendors already in progress, such as Dell, if there are suggestions for other campus agreements (for example, VMware), bring that to Sunny's attention.
• The ITMC is compiling information regarding telecommuting policies, procedures, and other information. Please contact your ITMC rep for more information.

The Taskforce on Personal Productivity - Ron DiNapoli

• Please see the handout for more information (handout to be available online soon.) It also includes a summary of the last 5 meetings.
• There is a Confluence site for this group, and the charter for this group is on the site
• Goal for the group is to make recommendations to Polley
• The group is mainly sharing experiences with different products and talking to peer institutions and Gartner consultants
• In the future they will hold an open meeting with ITMC to gather requirements and get feedback
• Current thinking is that the focus is on staff and faculty. Grads could opt in. Undergrads would not be included at this time.

CIT Systems and Operations - Rick MacDonald, Mike Hojnowski, Brian Messenger, Paul Zarnowski

• Looked to CCD initially for direction for presentation to go, based on that, concentrated mainly on VMware and storage farm
• Presentation available here