Re: Active directory migration and security standards issues

Hi David,

> I have several laptops that are encrypted per the new campus security
> standards in my shop that are being used as desktop computers.

The current minimum standards do not require data encryption at the disk
level. There is a provisional appendix stating encryption is required
for sensitive data, but I believe this has not been approved as of yet
(http://security.berkeley.edu:2002/MSRestricted.htm). Someone please
correct me if I am wrong.

Additionally, EFS is currently disabled in the CAMPUS domain by default
because of a lack of a UC or Campus level key management plan. I gave a
presentation last month to the CalNetAD user group regarding this:

http://calnetad.berkeley.edu/documentation/planning/meeting_20050517.html

I'm hopeful that the CalNetAD security subcommittee can make some
recommendations to CISC for a feasible key management plan.

However, I don't think that your problem with the is related to
encryption. See Karl's email.

Thanks,

John

-- 
John E. Weber
Microsoft Certified Systems Engineer
Central Computing Services - IS&T
Campus Active Directory Architect, CalNet Active Directory
University of California, Berkeley
johnweber@berkeley.edu
2195 Hearst Avenue, #300B-07
(510) 642-8426
http://calnetad.berkeley.edu

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.