<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Freestyle Script";
panose-1:3 8 4 2 3 2 5 11 4 4;}
@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:black'>I agree with Bill. Rebooting
between patrons is the ideal solution. <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'>Vanessa Bradt<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-align:justify'><span style='font-family:"Comic Sans MS";
color:#002060'><img width=103 height=121 id="Picture_x0020_1"
src="cid:image001.jpg@01C9821A.F0F37F20" alt="npl_logo"><o:p></o:p></span></p>
<p class=MsoNormal style='text-align:justify'><span style='font-size:10.0pt;
font-family:"Comic Sans MS";color:#002060'>46 West Main St.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Comic Sans MS";
color:#002060'>Norwalk, OH 44857<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Comic Sans MS";
color:#002060'>419-668-6063<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Comic Sans MS";
color:#002060'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Comic Sans MS";
color:#002060'>visit us at www.norwalk.lib.oh.us<o:p></o:p></span></p>
<p class=MsoNormal><i><span style='font-size:8.0pt;font-family:"Comic Sans MS";
color:#002060'><o:p> </o:p></span></i></p>
<p class=MsoNormal><b><i><span style='font-size:11.0pt;font-family:"Comic Sans MS";
color:#002060'>Keys to the Past…Gateway to the Future</span></i></b><b><i><span
style='font-size:11.0pt;font-family:"Comic Sans MS";color:#002060'><o:p></o:p></span></i></b></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Bill Hardison
[mailto:bhardison@norweld.org] <br>
<b>Sent:</b> Tuesday, January 27, 2009 2:31 PM<br>
<b>To:</b> JKENZIG<br>
<b>Cc:</b> oplintech@oplin.org<br>
<b>Subject:</b> Re: [OPLINTECH] Moving to less-locked-down public computers
with DeepFreeze<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'>I would say the best reason to
reboot between patrons (if not about the only one) is patron to patron
protection. If I stroll in and have a nasty bit of malware on a thumb
drive and infect (even with GREAT protection software running) the public PC,
the next patron, with a storage device, is likely to take it home with them.<br>
<br>
Just my 2˘ worth<br>
<br>
Bill<br>
<br>
Bill Hardison<br>
Computer Services Coordinator<br>
Northwest Regional Library System (NORWELD)<o:p></o:p></p>
<div>
<p class=MsoNormal>On Tue, Jan 27, 2009 at 12:46 PM, JKENZIG <<a
href="mailto:JKENZIG@cuyahogalibrary.org">JKENZIG@cuyahogalibrary.org</a>>
wrote:<o:p></o:p></p>
<div>
<div>
<p><span style='font-size:11.0pt;color:#1F497D'>Not sure why you want to
totally reboot between patrons. Cassie clears out internet cache at
logout. You will have a lot of issues with cassie scheduling if you reboot
after each patron. </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>We set up deepfreeze to go into
maintenance mode overnight once per week and set it to download and install
updates and then refreeze the workstation on a reboot prior to opening. </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'>We only reboot the systems if a
patron starts having problems on them and then Deepfreeze resets them to
normal. </span><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<p><b><span style='font-size:16.0pt;font-family:"Freestyle Script";color:#1F497D'>Jim
Kenzig</span></b><span style='font-size:11.0pt;color:#1F497D'><br>
</span><span style='font-size:10.0pt;color:#1F497D'>Network Manager</span><span
style='font-size:11.0pt;color:#1F497D'><br>
</span><span style='font-size:10.0pt;color:black'>Cuyahoga County Public
Library</span><o:p></o:p></p>
<p><i><span style='font-size:10.0pt;color:black'>Administrative Offices</span></i><o:p></o:p></p>
<p><span style='font-size:10.0pt;color:black'>2111 Snow Road / Parma, OH
44134-2728</span><o:p></o:p></p>
<p><i><span style='color:black'>p </span></i><span style='font-size:10.0pt;
color:black'>216.749.9389 </span><span style='color:black'>/ <i>f </i></span><span
style='font-size:10.0pt;color:black'>216.749.9445</span><o:p></o:p></p>
<p><span style='font-size:10.0pt;color:blue'><a
href="http://www.cuyahogalibrary.org" target="_blank">www.cuyahogalibrary.org</a></span><o:p></o:p></p>
<div>
<p><span style='font-size:11.0pt;color:#1F497D'> </span><o:p></o:p></p>
<div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;
border-color:-moz-use-text-color -moz-use-text-color'>
<p><b><span style='font-size:10.0pt'>From:</span></b><span style='font-size:
10.0pt'> <a href="mailto:oplintech-bounces@oplin.org" target="_blank">oplintech-bounces@oplin.org</a>
[mailto:<a href="mailto:oplintech-bounces@oplin.org" target="_blank">oplintech-bounces@oplin.org</a>]
<b>On Behalf Of </b>John Librarian<br>
<b>Sent:</b> Tuesday, January 27, 2009 9:42 AM<br>
<b>To:</b> <a href="mailto:oplintech@oplin.org" target="_blank">oplintech@oplin.org</a>;
<a href="mailto:SYSLIB-L@listserv.buffalo.edu" target="_blank">SYSLIB-L@listserv.buffalo.edu</a><br>
<b>Subject:</b> [OPLINTECH] Moving to less-locked-down public computers with
DeepFreeze</span><o:p></o:p></p>
</div>
<p> <o:p></o:p></p>
</div>
<p><span style='font-size:10.0pt;color:black'>Right now our public computers
are locked down so that you can't install anything, can't run anything that's
not on our run-only list, etc. This of course is in order to keep each
computer from getting messed up for subsequent patrons, and to protect other
machines on the network. Of course, there are times when the computers
won't do something a patron wants to do, like using a web site that requires
its own special software to be installed or running a program from a CD-ROM for
school. </span><o:p></o:p></p>
<div>
<div>
<p><span style='font-size:10.0pt;color:black'>So, we're going to try switching
to a less-locked-down setup. We're going to use Deep Freeze to restore
computers when they reboot, and we're going to use CASSIE to reboot between
patrons. (Both of these programs are new to us.) I would appreciate
any suggestions for further measures to take to keep things secure and running
nicely. Our environment: We have 34 public PC's which we're replacing
with new ones (with Windows XP); we have an Active-Directory-enabled Windows
domain with one DC, runningServer 2003. </span><o:p></o:p></p>
<p><span style='font-size:10.0pt;color:black'>My ideas are to have one user
account per computer (with permissions only to that computer) as a local power
user, to put these computers on a separate subnet and if possible a VLAN, and
to make sure our Windows server is locked down as much as possible. I
could put them on a separate segment of the firewall, but I understand that you
can't manage a Windows domain through a firewall (or any other kind of router)
and it seems like it would be useful to manage these computers on our existing
domain. I don't yet know how we can keep users from turning off CASSIE
after they log in; I'm not sure if keeping them from running taskmgr.exe will
do it; if nothing else I suppose we can have a script run every minute or 5
minutes, check for the CASSIE process, and reboot if it's not running (I think
I can make this invisible to the user using a VBS instead of just a BAT
file). </span><o:p></o:p></p>
<p><span style='font-size:10.0pt;color:black'>Thanks for any help you can give
me, even if it's just thoughts, or reasons you think this is a bad idea.
If you reply privately I won't forward your info to anyone - I know you
might not want to talk publicly about your security.</span><o:p></o:p></p>
<p><span style='font-size:10.0pt;color:black'> <a
href="mailto:johnqlibrarian@gmail.com" target="_blank"><span style='color:#2A5DB0'>johnqlibrarian@gmail.com</span></a></span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><br>
_______________________________________________<br>
OPLINTECH mailing list<br>
<a href="mailto:OPLINTECH@oplin.org">OPLINTECH@oplin.org</a><br>
<a href="http://mail.oplin.org/mailman/listinfo/oplintech" target="_blank">http://mail.oplin.org/mailman/listinfo/oplintech</a><o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><br>
<br clear=all>
<o:p></o:p></p>
</div>
</body>
</html>