Configuration Standards for Category 1 Computers
Below is the required configuration and required software for Category 1 computers for use by Baylor employees. Category 1 computers are defined as the primary office computer assigned to one employee. Installation of all Category 1 computers should be performed by ITS-Client Services Installs unless an exception has been approved by ITS-Security.
- All computers (Windows and Mac OS) must be bound to Active Directory
- All laptops and some desktops as determined by ITS-Security must have BitLocker or FileVault installed and all disk(s) encrypted.
- No local accounts outside of ITS service accounts can be present
- All computers must be configured to use the appropriate Software Update Service:
- Windows - Windows Server Update Service
- Mac OS X - Open Directory Software Update Management
- LANDesk must be installed and computer should be scanning into the server on a regular basis
- Symantec AV Endpoint Protection must be installed and kept up to date
- CrashPlan Pro must be installed and computer should be connected to the server on a regular basis, unless an Opt-Out form is on file with ITS for the computer
Reviewed July 21, 2016