The University's Information Security Policy requires that all Windows devices that store or process sensitive data use managed and monitored malware protection. While not required, it is recommended that Linux, Unix and Mac OS devices also use managed and monitored malware protection. The current recommended Antivirus/Malware application for university-owned computers is Microsoft System Center Endpoint Protection (SCEP).
How is SCEP installed?
Initially, we will be using a process called Group Policy to require machines to install this software on reboot only. When you restart your computer Configuration Manager will be installed onto your computer automatically.
How do I know if SCEP is installed?
Below are screen shots that illustrate the changes to the Start Menu; ToolTips showing Endpoint Protection and the Software Center:
The image below shows the two new menu items, highlighted in red which will be added to Medical Foundation Staff workstations.
The image below is from the ToolTips section of the menu bar on Microsoft Windows 7 computers. The highlighted shield is the icon for Microsoft System Center 2012.
Software Center Start Menu Item
The Software Center allows you to start Software Center from the Start Menu. OIS will not use the Software Center during the initial rollout. OIS will alert you when it will be used to field Software Updates and Application Installation.
Microsoft System Center Configuration Manager (SCCM) is the tool used to install SCEP on University-owned computers. SCCM also offers School of Medicine IT professionals and end users a number of other features and benefits.
SCCM will generate virus and Trojan alerts and send them to the appropriate IT staff
School of Medicine IT staff will have the ability to test and automatically field software updates/patches from a variety of software vendors including:
- Other Third Party
Software Package Installation
SCCM will automate the installation of software package such as Microsoft Office 2013 using the Software Center.
SOM IT staff will be able to ensure that workstations comply with University security policy by producing reports that compare the configuration of computers with those recommended in the University security policy.
SCCM provides a variety of reports that will help departmental business managers to make decisions about how to manage their IT budgets.
Information for SOM IT Staff
Pre-requisites for Implementing Microsoft SCEP
In order to install the Microsoft System Center EndPoint Point protection onto a machine the machine must be on the University's Active Directory domain. If your computers are not on the campus Active Directory domain please contact OIS.
Training on SCCM
OIS provides training for School of Medicine IT staff on how to use SCCM, and how to update your group policy to install the SCCM and SCEP agent.