Laptop Administration

Steve,

The problem is, left unchecked, a number of the laptop users do not return
to the network for one month or more. I work at a school system and the
teachers work on PP and other teaching tools at home, show the PP
presentation to their class, but never connect the laptop to the network.
There have been a couple of cases where the virus definitions were not
updated and the windows updates were not done, and a virus was allowed to
corrupt the laptop and then hop onto the network when the user connected. If
there was a policy that I could create that would force the computer to be
hooked back into the domain at least once a week, it would help reduce the
risk to the laptops.

Thanks,

Chris

"Steve Riley [MSFT]" wrote:

> Hm, this happens sort of automatically in most cases. A user returns from a
> business trip, goes to the office, plugs into the network there, and
> receives group policy, SMS, and NAP updates.
>
> Do some of your laptop users never return to the office?
>
> --
> Steve Riley
> steve.riley RemoveThis @microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>
> "Chris Sprague" <Chris Sprague RemoveThis @discussions.microsoft.com> wrote in message
> news:EB42FB83-07B0-4C78-857F-5E08523494CB@microsoft.com...
> > I was wondering if there was a way to force laptop users to check into the
> > domain to allow updates to their computers. The best way would be if i
> > can
> > disallow login with a message that reports the computer most be returned
> > to
> > the domain. If anyone has written a script or knows of an embedded
> > windows
> > function that allows this, it would be helpful. Thank you.
>
 >> Stay informed about: Laptop Administration 

Chris Sprague wrote:
> The problem is, left unchecked, a number of the laptop users do not
> return to the network for one month or more. I work at a school
> system and the teachers work on PP and other teaching tools at
> home, show the PP presentation to their class, but never connect
> the laptop to the network. There have been a couple of cases where
> the virus definitions were not updated and the windows updates were
> not done, and a virus was allowed to corrupt the laptop and then
> hop onto the network when the user connected. If there was a
> policy that I could create that would force the computer to be
> hooked back into the domain at least once a week, it would help
> reduce the risk to the laptops.

Why is your antivirus software on laptops setup so it can only get updates
from your server(s)?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
 >> Stay informed about: Laptop Administration 

I just started a few weeks ago working for this school division. The current
policy install for Symantec and Windows update is to update from internal
servers. They want to control the Windows updates on all computers so they
are the same. For the Symantec, I wasn't aware of a setting that allowed
both mananged and unmanaged depending on location. At the last company I
worked for, I set all laptops to point to Symantec and do live-updates. This
worked effectively there, however, I lost the ability to admin. the Symantec
on those laptops from the server. This only works well in situations where
there are few laptops, or tech savy people using the laptops. What I need in
this situation is the ability to verify all updates from the server for
Symantec and Windows update.

"Shenan Stanley" wrote:

> Chris Sprague wrote:
> > The problem is, left unchecked, a number of the laptop users do not
> > return to the network for one month or more. I work at a school
> > system and the teachers work on PP and other teaching tools at
> > home, show the PP presentation to their class, but never connect
> > the laptop to the network. There have been a couple of cases where
> > the virus definitions were not updated and the windows updates were
> > not done, and a virus was allowed to corrupt the laptop and then
> > hop onto the network when the user connected. If there was a
> > policy that I could create that would force the computer to be
> > hooked back into the domain at least once a week, it would help
> > reduce the risk to the laptops.
>
> Why is your antivirus software on laptops setup so it can only get updates
> from your server(s)?
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>
>
>
 >> Stay informed about: Laptop Administration 

What you want to do requires that you (meaning your school's IT department)
take greater ownership and control of the computers. The challenge here
isn't the technology -- it's the politics of your organization. Is this
something you have sufficient authority to do, or can obtain?

--
Steve Riley
steve.riley RemoveThis @microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



"Chris Sprague" <ChrisSprague RemoveThis @discussions.microsoft.com> wrote in message
news:05526E0A-259B-46FC-A9FC-A32DD00CD8DA@microsoft.com...
> I just started a few weeks ago working for this school division. The
> current
> policy install for Symantec and Windows update is to update from internal
> servers. They want to control the Windows updates on all computers so
> they
> are the same. For the Symantec, I wasn't aware of a setting that allowed
> both mananged and unmanaged depending on location. At the last company I
> worked for, I set all laptops to point to Symantec and do live-updates.
> This
> worked effectively there, however, I lost the ability to admin. the
> Symantec
> on those laptops from the server. This only works well in situations
> where
> there are few laptops, or tech savy people using the laptops. What I need
> in
> this situation is the ability to verify all updates from the server for
> Symantec and Windows update.
>
> "Shenan Stanley" wrote:
>
>> Chris Sprague wrote:
>> > The problem is, left unchecked, a number of the laptop users do not
>> > return to the network for one month or more. I work at a school
>> > system and the teachers work on PP and other teaching tools at
>> > home, show the PP presentation to their class, but never connect
>> > the laptop to the network. There have been a couple of cases where
>> > the virus definitions were not updated and the windows updates were
>> > not done, and a virus was allowed to corrupt the laptop and then
>> > hop onto the network when the user connected. If there was a
>> > policy that I could create that would force the computer to be
>> > hooked back into the domain at least once a week, it would help
>> > reduce the risk to the laptops.
>>
>> Why is your antivirus software on laptops setup so it can only get
>> updates
>> from your server(s)?
>>
>> --
>> Shenan Stanley
>> MS-MVP
>> --
>> How To Ask Questions The Smart Way
>> http://www.catb.org/~esr/faqs/smart-questions.html
>>
>>
>>
 >> Stay informed about: Laptop Administration