Re: [SECURITYEP] Discussion about Windows XP SP2

["Dunker, Mary" <dunker () VT EDU>]

I am just now getting on board with the Educause security groups, so
forgive me if you have already discussed this...
Relative to the discussions with Microsoft, I'm wondering if other
higher education institutions are having problems securing their
environments due to the lack of interoperability of Microsoft with other
platforms.  We currently have two issues that are preventing us from
increasing security on our Active Directory:

*       Windows XP SP2 introduces a problem that prevents connecting to
our NetApp NAS with anything higher than NTLM.  (NTLMV2 worked before XP
SP 2.) 
*       Microsoft removed a lot of functionality that was in their
Outlook 2001 product for the Mac when they replaced it with Entourage.
We attempted to be involved in the beta release of Entourage, received
the software too late to have our input recognized, and now the fact
that our MAC users don't have a fully functional client for Exchange is
keeping them on Outlook 2001, which does not support NTLMV2.

We are working with our account reps. to try to resolve these issues
with Microsoft and their business partners, but it is a struggle!  Has
anyone else experienced Microsoft-related interoperability problems that
impact security?  
 
Mary
 
 

-------------------------------------------- 
Mary Dunker 
Secure Enterprise Technology Initiatives 
Virginia Tech Information Technology 
1700 Pratt Drive 
Blacksburg, VA 24060 
(540) 231-9327 
FAX: (540) 231-7413 
dunker () vt edu 

        -----Original Message-----
        From: Rodney Petersen [mailto:rpetersen () EDUCAUSE EDU] 
        Sent: Wednesday, March 24, 2004 12:48 PM
        To: SECURITY-EP () LISTSERV EDUCAUSE EDU
        Subject: [SECURITYEP] Discussion about Windows XP SP2
        
        
        Jack etal,
         
        I'd like to spend some time during the Effective Practices
Working Group Call on Friday describing our interactions with Microsoft.
(Hopefully, everyone has seen the Security Task Force document on
"Improving the Security of Windows Platforms" posted to the Security
Discussion Group.)  I would also like to describe some earlier
discussions with staff from the Center for Internet Security regarding
their Windows benchmarks.  The CIS benchmarks are currently discussed in
the EP Guide.  Finally, I have a call scheduled with Microsoft on Friday
afternoon at 2 p.m. ET to brainstorm higher education's participation in
the rollout plan for Windows XP Service Pack 2.  I would like to see 1
or 2 members of the effective practices working group join me in that
call.
         
        Thanks,
         
        -Rodney


**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.