[Micronet] Laptops as primary computer

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Micronet] Laptops as primary computer

Beth Muramoto
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Baril
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy

On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a moz-do-not-send="true" href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a moz-do-not-send="true" href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
510-643-9215 -- Work
510-643-9136 -- Fax
925-352-9543 -- Cell

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Sean McMahon
I also saw these for the first time recently, looks like a nice design :


Regards,

Sean

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




--

Sean McMahon

IT Service Desk Analyst



University of California, Berkeley 

Campus Shared Services - IT

1608 4th Street

Berkeley, CA 94710-7600

Office: 510.664.9303

sharedservices.berkeley.edu



-----BEGIN PGP PUBLIC KEY BLOCK-----

Version: Mailvelope v0.8.2

Comment: Email security by Mailvelope - http://www.mailvelope.com


xsBNBFOE450BB/9CEmJt3zt9B+Xn/IHH6U6qpxcbf8z54X6dXZ+38KRV1Ab3

cAli8saROa0AwBa4p7pD/xLMy/gfELedE816NArkz0GRFDg83H17x8c82ATT

ky9ch0VciUahrfOEvgX9YDNEth6MvdBcE6AdGbOdifmLILI+cvEIlDiJyeST

82xL/opwlCYfahpmH1mRpCqi0Y+Qll/ko/T+S1LFZb1l1GTyDiU4CXltpVaE

w1VviyehGLagljIaehsaVeK632+LvGKme0iCrzhHqz6M0EFpJyi+yCN09PlI

VSiRTjVpp1/Wz0uR7hgrfbXEo0ttVOmbQ3HmvqDLj0CjQ+4ACJv1nc7PABEB

AAHNKiJTZWFuIE0uIE1jTWFob24iIDxzZWFubW1jbWFob25AZ21haWwuY29t

PsLAcgQQAQgAJgUCU4TjngYLCQgHAwIJEALYNWHk+gaHBBUIAgoDFgIBAhsD

Ah4BAADcFAf9HB8zhQCc3Ps4lA+vse2rpYgMQqUug4GpfN2TAzdEssz/hztq

thB0NFgDD3eQqihoIIg6IvcF3pEWWKNIB9CxfH+y7napXv4pIlx6HPQoVL85

CWryShNoRqafafdkxK+7jmnYkEpvddg/rO2wtIxD9Pb66P0wbFPvC7dPDVIg

Jz6+UGxEaI8djIxNhjCI8mBL7CyN2AveTadt0Mf2t8zsxSbwhIGu3x2Rh355

pBzAeA5pgj5re+tT4g3pAK9wZzO61DaxkAF+rB5jFCIVgFnrUFd6okcAzLRk

bWGCRlz+Dx3gORLfSPMastIZmH0JECHUWAUJczRIl66IP6hIYqPJfM7ATQRT

hOOeAQgA6WZjAW2k2Uq1yIHCc6t4z/IIgqZZJeKuGCo1LlPrtmJhS+Ibcw7m

yB9WqdnL3NaguHWAhPwttE1jl/hGsjnaQC+2fLG4DwRv/D1ZoybVJoA2osmK

hQO6GrD74aDRe3bauBhcgcmgBRT+boh0+zA9tUMa+uuqf37b5nd45MBWnZIG

xhiFxkxky3bbHpp1y6h+kgr32FVeDTQiqJI8O1JBrLj5S9y8A3YHNOqQJgH0

mQlSUEjztf+If1xIE33SC3GJ3Oa1zy75rPYma7XXkP+tdarHcvky16NQgbQG

3VCKTry/lGqr8MUazliUqjL0S4h+UMQomhGI3VYkkmzlg2wglwARAQABwsBf

BBgBCAATBQJThOOiCRAC2DVh5PoGhwIbDAAAPlEH/RREVZSIVZThMQpTRTZW

vKu1XUxTW4EU9ZXlfYSVQuudbwpNmlUb0GXVYuKaeEp+JQTFaj1OCOfP7wXt

qHRzy0k2OCI+mf3fqRF1Hwr20iHadPwTHjw4Vy3zUotvQvurEdRMSnkRNUwb

miTZlSjLM11FseIvB6qk/tbS8OFheTYMHzskMfbdDny3JuWweKXPQQ5ILcZz

HHeAkB0RvjGHuvigRyJBwzH/trdYYf0G7gg6Y/ET+fDsuwq8jErpVcFZjGu9

GwW6zzCflyQkp6nWWcOijOauWDGhoZsn6vA8imRPfxO2wPTWbNQhtyrtsFzj

vcQHen38kRCFriPmQTNQYC8=

=u4Ct

-----END PGP PUBLIC KEY BLOCK-----



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Adam Grimaldi
In reply to this post by Baril
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: 1 (510) 612-9036 (Okay way to reach me)
Office: 1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Baril
This is the other thunderbolt dock I have in use here at the J-School:

http://www.neweggbusiness.com/Product/Product.aspx?Item=9B-34-972-128&nm_mc=KNC-GoogleBiz-PC&cm_mmc=KNC-GoogleBiz-PC-_-pla-_-Docking+Station-_-9B-34-972-128&gclid=CKKZ75Oe28QCFUiEfgodulMAUA

Best,

Roy

On 4/3/2015 3:40 PM, Adam Grimaldi wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: 1 (510) 612-9036 (Okay way to reach me)
Office: 1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a moz-do-not-send="true" href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a moz-do-not-send="true" href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a moz-do-not-send="true" href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a moz-do-not-send="true" href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a moz-do-not-send="true" href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
510-643-9215 -- Work
510-643-9136 -- Fax
925-352-9543 -- Cell

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Baril
In reply to this post by Adam Grimaldi
And, finally, the ultimate (and cheaper) uber-dock:

http://www.caldigit.com/thunderboltstation2/

--roy

On 4/3/2015 3:40 PM, Adam Grimaldi wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: 1 (510) 612-9036 (Okay way to reach me)
Office: 1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a moz-do-not-send="true" href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a moz-do-not-send="true" href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a moz-do-not-send="true" href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a moz-do-not-send="true" href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a moz-do-not-send="true" href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
510-643-9215 -- Work
510-643-9136 -- Fax
925-352-9543 -- Cell

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Michelle Bautista-2
In reply to this post by Adam Grimaldi
Hi Beth,

Additionally, laptop users may be consider not saving files locally and using synchronization with google drive or box for their files. This will reduce the amount of data that is stored locally.

-Michelle

On Fri, Apr 3, 2015 at 3:40 PM, Adam Grimaldi <[hidden email]> wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: <a href="tel:1%20%28510%29%20612-9036" value="+15106129036" target="_blank">1 (510) 612-9036 (Okay way to reach me)
Office: <a href="tel:1%20%28510%29%20664-7290" value="+15106647290" target="_blank">1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




--

Michelle Bautista

Operations Manager

University of California, Berkeley 

Campus Shared Services - IT

510.295-9283



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Ian Crew
Well, speaking as someone who has been laptop-only for 6 or 8 years now (MacBook Pros all along), some thoughts:

1) I don't think a dock is at all necessary: when I arrive at my office, I connect my power, external monitor, Ethernet, and USB keyboard. Thanks to wifi and Bluetooth, the last two can even be optional (but I'm a little old-school). At home, I have pretty much the same setup, but I plug in an external hard drive (for TimeMachine backups) instead of the Ethernet. It takes me less than 10 seconds: quick enough that I don't even think about it. 

2) I agree that automatic backups (over the net, to a server) are really important. My TimeMachine disk is just a second backup for belt-and-suspenders protection and added convenience, but any backup scheme that requires ongoing action (like connecting a hard drive) on the part of the user is really risky. 

3) It's possible -- and a really good idea -- to set up full-disk encryption for both the MacBook and TimeMachine backups. With modern processors and SSDs, the performance penalty is pretty minimal. 

4)  Once you convert to laptop-only, you'll never go back.  When I'm in my office, in meetings, on a plane or a train, or at home at 3AM dealing with a sick server, I always have my complete computing environment with me. I never have to think "oh, crap, that's on the other computer."  I did do the whole remote-desktop between home and work routine for a few years before going laptop-only, and that was massively clunkier and more painful. (For example: having to drive into the office or call a colleague because the computer on my desk got wedged or went to sleep.)

At least that's my 2 cents. Hope it's useful somehow....

Ian

___
Ian Crew

IST-Architecture, Platforms and Integration (API)
Earl Warren Hall, Second Floor
University of California, Berkeley


On Apr 3, 2015, at 5:33 PM, Michelle Bautista <[hidden email]> wrote:

Hi Beth,

Additionally, laptop users may be consider not saving files locally and using synchronization with google drive or box for their files. This will reduce the amount of data that is stored locally.

-Michelle

On Fri, Apr 3, 2015 at 3:40 PM, Adam Grimaldi <[hidden email]> wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: <a href="tel:1%20%28510%29%20612-9036" value="+15106129036" target="_blank">1 (510) 612-9036 (Okay way to reach me)
Office: <a href="tel:1%20%28510%29%20664-7290" value="+15106647290" target="_blank">1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




--

Michelle Bautista

Operations Manager

University of California, Berkeley 

Campus Shared Services - IT

510.295-9283



-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Beth Muramoto
In reply to this post by Adam Grimaldi
Adam,

Thanks for all this great information. From the sounds of the responses I've received I'm in a bit of uncharted territory so all the information I've gotten has been helpful in getting me pointed in some direction whereas before I wasn't sure what the "right things" to do were.

I'll investigate the insurance angle with our business office people to see what's involved with that as well as create a liability agreement.  We sort of already have one for the projectors and digital cameras that we loan out to students to present and record their teaching so it might need a bit more tweaking to fit the laptop parameters.

My curiosity is definitely peaked about Find My Mac and maybe utilizing it as a way to erase data remotely when necessary. I already have my own personal account associated with my @berkeley.edu email address (this was back in the day when setting up Apple ID accounts was by email address and it was the only one I had -- I hadn't joined the Google bandwagon yet) so I'd probably have to create another one. I understand what you mean about a shared Apple ID, for example, I was thinking about using our departmental account [hidden email], but it is shared by another colleague as it is our unit email address. The quandary is that it would be prudent to share the Apple ID in case something happens to me or I retire and that way my colleague could continue to monitor so I'm hoping that it would be okay to use that.

Last question, if I were to buy these laptops through CSS procurement, I am assuming that they would have the Casper image, TEM and Druva (I'm hoping this will achieve the necessary backup process needed as we don't have a way to do over the net backups here) as well. Are there any "protections" that CSS would provide or would that security aspect (specifically a Find My Mac-like system, not the cables and docks) be localized to us?

Thanks for your understanding and help about these questions. I want to do best practices as much as possible upfront, but acknowledge I may need to fill in gaps or adjust procedures and set ups as needed.

I welcome others on Micronet to continue chiming in. I appreciate all of the feedback.

Beth



On Fri, Apr 3, 2015 at 3:40 PM, Adam Grimaldi <[hidden email]> wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: <a href="tel:1%20%28510%29%20612-9036" value="+15106129036" target="_blank">1 (510) 612-9036 (Okay way to reach me)
Office: <a href="tel:1%20%28510%29%20664-7290" value="+15106647290" target="_blank">1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.





--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  (510) 643-0203 
Fax:  (510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Laptops as primary computer

Ben Gross
Hi Beth,

If you have CSS-IT support and you order a new Mac laptop, CSS-IT will load the Berkeley Desktop Mac Image (also known as the Casper image) onto your Mac. Berkeley Desktop Mac images have Self Service from Casper as well as patching service from TEM (also known as BigFix). Self service on Casper (as well as via BigFix for Windows) offers quite a few packages to users with managed machines. In addition to patching the applications that ship by default with the Berkeley Desktop, we will also patch any applications users download via self-service.

Users with self service do not need administrative rights to install software listed in self service. I have included links to general documentation about the Berkeley Desktop and self service software offers below. One of the offers for the Mac is an offer to enable Find My Mac.

General:

Berkeley Desktop | Endpoint Engineering and Infrastructure

Endpoint Engineering and Infrastructure - Home

Mac:

Mac OS X - Home

Mac OS X - Mac Application List

Windows:

EEI Image Applications and Components (Shared) - Google Sheets (Windows)

Thank you,
Ben Gross
Manager, Endpoint Engineering and Infrastructure
Information Services and Technology Division
University of California, Berkeley


On Mon, Apr 6, 2015 at 10:12 AM, Beth Muramoto <[hidden email]> wrote:
Adam,

Thanks for all this great information. From the sounds of the responses I've received I'm in a bit of uncharted territory so all the information I've gotten has been helpful in getting me pointed in some direction whereas before I wasn't sure what the "right things" to do were.

I'll investigate the insurance angle with our business office people to see what's involved with that as well as create a liability agreement.  We sort of already have one for the projectors and digital cameras that we loan out to students to present and record their teaching so it might need a bit more tweaking to fit the laptop parameters.

My curiosity is definitely peaked about Find My Mac and maybe utilizing it as a way to erase data remotely when necessary. I already have my own personal account associated with my @berkeley.edu email address (this was back in the day when setting up Apple ID accounts was by email address and it was the only one I had -- I hadn't joined the Google bandwagon yet) so I'd probably have to create another one. I understand what you mean about a shared Apple ID, for example, I was thinking about using our departmental account [hidden email], but it is shared by another colleague as it is our unit email address. The quandary is that it would be prudent to share the Apple ID in case something happens to me or I retire and that way my colleague could continue to monitor so I'm hoping that it would be okay to use that.

Last question, if I were to buy these laptops through CSS procurement, I am assuming that they would have the Casper image, TEM and Druva (I'm hoping this will achieve the necessary backup process needed as we don't have a way to do over the net backups here) as well. Are there any "protections" that CSS would provide or would that security aspect (specifically a Find My Mac-like system, not the cables and docks) be localized to us?

Thanks for your understanding and help about these questions. I want to do best practices as much as possible upfront, but acknowledge I may need to fill in gaps or adjust procedures and set ups as needed.

I welcome others on Micronet to continue chiming in. I appreciate all of the feedback.

Beth



On Fri, Apr 3, 2015 at 3:40 PM, Adam Grimaldi <[hidden email]> wrote:
Good afternoon Beth (and all)

So, in terms of docks, I've helped a handful of people with Elgato docks, to great success:

Of course, I'm also still a fan of just a thunderbolt display.

They may be expensive, but boy are they nice.

In terms of your questions about theft, find my Apple, etc:

Campus liability document? I do not believe so. Or at the very least, I have not encountered such a thing across the many laptops I've deployed across multiple buildings and departments.

Laptop Insurance? That's entirely up to you. These things do get stolen. I had a client just this week have her laptop swiped off a coffee table in a coffee shop in SF WHILE actively working on it. I kid you not. 

Find My Mac & Apple IDs?: There is indeed a "Find my iPhone" feature for macs. It does require an Apple ID. My Zone within CSS-IT (and sorta CSS-IT in general) discourages a shared Apple ID. Mainly because if someone changes the password, it breaks ALL of them. Bad news. Instead, my Zone (and again, sorta CSS-IT) instead advises creating a personal Apple ID with your Berkeley Email. You can actually create one without a credit card too. (I can go into that more, if you like) From there, just login and turn it on.

Other Security?: If you're feeling uneasy, I highly suggest turning on Filevault. Especially if you are dealing with sensitive data. When you turn it on, be sure to document all the passwords and such, otherwise you will be profoundly screwed if/when something does wrong. Still, it's built-in HDD encryption.

I also suggest, if possible, keeping a small inventory of the apple laptops in your possession. Make / Model / Serial. That way if it gets stolen, you have something to give to the police.

I hope that helps.

Adam Grimaldi
CSS-IT Zone 5 Team Lead
Business/Tech Support Analyst 3
[hidden email] (Best way to reach me)
Cell: <a href="tel:1%20%28510%29%20612-9036" value="+15106129036" target="_blank">1 (510) 612-9036 (Okay way to reach me)
Office: <a href="tel:1%20%28510%29%20664-7290" value="+15106647290" target="_blank">1 (510) 664-7290 (I am rarely in my office - keep that in mind)



------------------------------------------------------------------
Ticket Request Options:
1. https://shared-services-help.berkeley.edu/
2. Call 664-9000, option 1, then option 4
3. Email [hidden email]
------------------------------------------------------------------

On Fri, Apr 3, 2015 at 3:06 PM, Baril <[hidden email]> wrote:
You might want to check out this link. Great product!

http://www.landingzone.net/

Best,

Roy


On 4/3/2015 2:58 PM, Beth Muramoto wrote:
As always, please bear with the lengthy and likely extraneous explanation:


We are noticing a trend among staff requesting laptops with external monitors for use as their primary computer versus the standard desktop. They are attending more meetings and instead of taking notes and transcribing them when they get back to their offices, they want to be able to type everything then and there.

We don't have a budget for letting them have both a desktop and a laptop, but understand the need that the laptop would fulfill. My thoughts stray to the "good old days" of docking stations. I forgot the Apple laptop that had that available. So I guess this is really something whose time has finally come for us.

However, I know that there are a LOT of things to consider like from a security standpoint, liability issues, insurance etc.

I've listed the kinds of questions I'm wrestling with (and if anyone has other things I need to think about, please do mention them if I haven't considered them or have forgotten to mention  them here) and I want to tap anyone who might have already gone through this kind of process and what steps did you take to ensure some of the "dangerous ground" that we'll be treading.

I have considered some of the security issues such as logging into the computer both when turning on the computer as well as when it sleeps, locking them away in locked drawers or locked offices when leaving the office or use a cable lock to secure them to the desks, creating an admin account for me as IT (to control installs etc.), a standard login for the user (we already do this with the desktops to meet campus security standards), and considering the potential for someone taking the laptop home and needing VPN to access online services, 

Here are questions I don't have an answer to and would love to have some guidance on. 

Have any of you or does campus have liability document that the user has to sign for situations of loss, destruction or theft?

Should we insure these laptops for replacement in case of loss, destruction or theft?

Is there a way to implement Find My Mac (forgot to mention that they will be Macbook Pros) on the laptops to track lost laptops and erase data remotely? If so, would I have to use my personal Apple ID account or can I create a "departmental" one with an iCloud account that would give me this ability?


This is a really big step and I want to make sure I cover all of the specific pitfalls and security measures for going this route and I realize that I'm probably not thinking about how to cover every consequence.

Any help or suggestions are welcome and as always appreciated.

Beth



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.

-- 
Roy A. Baril
Director of Technology
Graduate School of Journalism
University of California
121 North Gate Hall
Berkeley, CA 94720
<a href="tel:510-643-9215" value="+15106439215" target="_blank">510-643-9215 -- Work
<a href="tel:510-643-9136" value="+15106439136" target="_blank">510-643-9136 -- Fax
<a href="tel:925-352-9543" value="+19253529543" target="_blank">925-352-9543 -- Cell


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.





--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  <a href="tel:%28510%29%20643-0203" value="+15106430203" target="_blank">(510) 643-0203 
Fax:  <a href="tel:%28510%29%20643-6239" value="+15106436239" target="_blank">(510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************



-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.