This will serve as the policy and procedural guidelines regarding the use of generic network accounts (IDs) utilized by departments on campus. This policy is specific to network access via Novell accounts. Other resources such as GroupWise will be handled in a different manner.
Many departments employ students to work within their office where they may have a need to access shared network resources. Such activities are logging into a departmental computer to execute special applications (i.e. Datatel UI, GroupWise), access shared network drives/folders/documents, and the ability to print to departmental printers.
Certain activities present a security issue; students often have access to confidential data. If student employees were to have direct access with their personal student account, they would virtually have access to the confidential data from any computer system on-campus and/or off-campus. If a student were to use their personal account and walk away from a computer (i.e. lab, kiosk, or off-campus PC using a utility like NetDrive), or if a computer was compromised by a hacker, the potential for a security breach is exponential.
The use of a generic ID provides a level of security in that the ID is restricted (tethered) to specific computer hardware typically located within the department. The generic ID would therefore be unusable from any other location or computer system, thereby reducing the potential for a security breach.
The student employee supervisor needs to submit a Generic ID request, via email, to their supervisor, indicating the desire to have a Generic ID(s) created and providing the following information:
After receiving the employee's generic ID request email, the employee's supervisor needs to approve the request and forward the email to the ITS Support Center at firstname.lastname@example.org .
An ITS Support Center representative will then conduct a brief analysis to identify the technical information needed to associate the ID with a specific computer system and any additional access to resources needed, providing that information to Network Services.
If multiple computers are to be used by student employees within the department, unique IDs will be assigned to each specific computer system.
Supervisors will be responsible requesting any shared drive assignments, as well as for changing or requesting password changes; to handle student employment turn-over. All account passwords will be forced to be changed every 120 days, at a minimum.