FW: deep freeze needs a little thawing

["Schattle, Donald" <SCHATTLE () PROVIDENCE EDU>]

HI Mark,

Please see information from our Public Lab Administrator below.

Hope this helps:)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Donald J. Schattle II, CISM
Information Security Officer
GLB-Act Coordinator
Providence College
schattle () providence edu<mailto:schattle () providence edu>
401.865.1558
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
********************************
Statement of Confidentiality

The information contained in this electronic message and any attachments to this message are intended for the exclusive 
use of the addressee(s) and may contain confidential or privileged information.  If you are not the intended recipient, 
please notify the sender immediately and destroy all copies of this message and any attachments.  Your cooperation is 
appreciated.

From: Hauerwas, Adam
Sent: Thursday, September 18, 2014 10:15 AM
To: Schattle, Donald
Subject: RE: deep freeze needs alittle thawing

________________________________

Mark, DeepFreeze allows for the configuration of Windows Updates within its setup.  There are Faronics KB articles here:

http://support.faronics.com/Knowledgebase/Article/View/297/8/how-are-windows-updates-handled-on-deep-freeze-protected-computers

and here:

http://www.faronics.com/document-library/document/how-to-manage-windows-updates-with-deep-freeze/

You configure Windows Updates on a tab within the configuration file, and then schedule update windows with a 
scheduler.  With DeepFreeze 7.5 and higher, DeepFreeze can download and cache updates to the workstation prior to 
thawing, applying, and refreezing in order to minimize downtime.  During the update window you can also disable 
keyboard and mouse to make sure that the workstation is unusable during maintenance.

At our institution we configure the PC's with a BIOS-based power-on time in order to try and "hit" the established 
maintenance window, and have scheduled shutdowns on days where maintenance should not apply.

I'd recommend your PC services area get in touch with Faronics technical support if they have any issues, and work with 
you to establish an update policy.  You may have to configure the NAC to specify "minimum versions" that are not 
necessarily the most current version (given that some workstations may miss a particular update), but that is up to you 
and what's possible with your NAC configuration.

Adam Hauerwas
----
Adam Hauerwas
hauerwas () providence edu<mailto:hauerwas () providence edu> | Acad. Sup. & Int. Specialist
401.865.2686 voice      | Accinno Hall, Providence College
401.865.1345 fax        | 549 River Avenue; Providence, RI 02918

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mark 
Reboli
Sent: Thursday, September 18, 2014 9:09 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] deep freeze needs alittle thawing

Our PC services area is utilizing the Faronics Deep Freeze software laptops.  The version they are utilizing is 
7.70.220.4460.  The problem I am looking for assistance with is this:

They deep freeze the computer, however due to the deep freeze windows updates are not applied nor is the antivirus 
software updated.  This creates issues with our NAC, as NAC requires the pcs to be up-to-date on both windows updates 
and antivirus.

Is anyone else utilizing this a software, if so can you tell me how you got around this issue?

[Description: MU Arches]
Mark Reboli
Network/Telcom Manager
Misericordia University
(570) 674-6753