UTEP Computer Lab Management Policy Version 1.0
1. Table of Contents 1. Table of Contents...2 2. Tables...5 3. Approvals...6 4. Document Maintenance...7 5. Change History...7 6. Scope and Purpose...7 7. Definitions of Lab Types...7 7.1. Open Access with Unrestricted Use... 7 7.2. Open Access with College Restriction... 8 7.3. Specialty / Restricted Lab... 8 7.4. Hybrid... 8 7.5. All-Campus Classroom Lab... 8 7.6. Administrative... 8 8. Designation of Lab Categories...8 9. Open Access with Unrestricted Use...9 9.1. Equipment... 9 9.2. Software... 10 9.2.1. For Microsoft Windows PCs:...10 9.2.2. For Apple Computers:...10 9.2.3. For Unix / Linux Computers:...10 9.3. User Accounts and Domain Management... 11 9.4. Printing... 11 9.4.1. Printers...11 9.4.2. Print Server...12 9.4.3. Release Stations...12 9.4.4. Client Software...13 9.4.5. Printing Services...13 9.5. Hours of Operation... 13 9.6. Services... 14 9.7. Networking Requirements... 14 9.8. Equipment Naming Convention... 14 9.9. Security... 14 9.10. Requirements for Students with Disabilities... 15 10. Open Access with College Restriction...15 10.1. Equipment... 15 10.1.1. For Microsoft Windows PCs...15 10.1.2. For Apple Computers...15 10.2. Software... 15 10.2.1. For Microsoft Windows PCs:...15 10.2.2. For Apple Computers:...15 Version 1.0 Page 2 of 32 June 1, 2006
10.2.3. For Unix / Linux Computers:...16 10.3. User Accounts and Domain Management... 16 10.4. Printing... 16 10.4.1. Printers...16 10.4.2. Print Servers...16 10.4.3. Release Station...16 10.4.4. Client Software...16 10.4.5. Printing Services...16 10.5. Hours of Operation... 16 10.6. Services... 17 10.7. Networking Requirements... 17 10.8. Equipment Naming Convention... 17 10.9. Requirements for Students with Disabilities... 17 10.10. Security... 17 11. Specialty / Restricted Labs...18 11.1. Equipment... 18 11.2. Printing Equipment... 18 11.3. Software... 18 11.4. Services... 19 11.5. Networking Requirements... 19 11.6. Equipment Naming Convention... 19 11.7. Security... 19 11.8. Special Considerations for Restricted Labs... 19 12. Hybrid Labs...20 12.1. Equipment... 20 12.1.1. For Microsoft Windows PCs...20 12.1.2. For Apple Computers...20 12.2. Software... 20 12.3. User Accounts and Domain Management... 20 12.4. Printing... 20 12.4.1. Printers...20 12.4.2. Print Servers...20 12.4.3. Release Station...20 12.4.4. Client Software...21 12.4.5. Printing Services...21 12.5. Hours of operation... 21 12.6. Services... 21 12.7. Networking Requirements... 21 12.8. Equipment Naming Convention... 21 12.9. Security... 21 12.10. Requirements for Students with Disabilities... 21 13. Classroom Use Only...21 13.1. Equipment... 21 13.2. Software... 21 13.3. User Accounts and Domain Management... 22 Version 1.0 Page 3 of 32 June 1, 2006
13.4. Printing... 22 13.4.1. Printers...22 13.4.2. Print Servers...22 13.4.3. Release Station...22 13.4.4. Client Software...22 13.4.5. Printing Services...22 13.5. Hours of operation... 22 13.6. Services... 22 13.7. Networking Requirements... 22 13.8. Equipment Naming Convention... 22 13.9. Security... 22 13.10. Requirements for Students with Disabilities... 23 14. Administrative Labs...23 14.1. Equipment... 23 14.2. User Accounts and Domain Management... 23 14.3. Printing... 23 14.4. Software... 23 14.5. Services... 23 14.6. Hours of operation... 23 14.7. Networking Requirements... 23 14.8. Equipment Naming Convention... 24 14.9. Requirements for Students with Disabilities... 24 14.10. Security... 24 15. General Lab Printing Policies...24 15.1. Who Can Print... 24 15.2. Free Printing Allotments... 24 15.3. Purchasing Additional Print Credit... 25 15.4. Semester Rollover of unused printing balances... 26 15.5. Printer Problems... 26 15.6. Faculty and Staff Printing... 27 15.7. Wireless Printing... 27 15.8. Supplies and Maintenance... 27 16. Computer Replacement Fund Eligibility...27 16.1. Prioritization Criteria for Computer Replacement Funds... 29 16.2. Labs Requiring Special Hardware... 29 17. Process for Creation of New Computer Labs...29 18. Glossary of Terms...30 19. Appendix A Designation Letter for Lab Category...31 20. Appendix B Non-UTEP Users...32 21. Appendix C Lab Inventory...32 Version 1.0 Page 4 of 32 June 1, 2006
2. Tables Table 1 Open Lab minimum hardware specifications for Microsoft Windows PCs... 9 Table 2 Open lab minimum hardware specifications for Apple Computers... 9 Table 3 Open Lab minimum hardware specifications for Linux Computers.... 9 Table 4 Open Lab Required Software for Microsoft Windows PCs... 10 Table 5 - Open Lab Required Software for Apple Computers... 10 Table 6 - Open Lab Required Software for Linux / Unix computers... 11 Table 7 Open Lab Minimum specifications for laser black & white print device... 12 Table 8 Open Lab Minimum specification for laser color print device... 12 Table 9 Print Server specification... 12 Table 10 - Lab Users and Payment / Allotment Method... 24 Table 11 - Printing Budget Allocations for Students... 25 Table 12 - Standard Printing Rates for UTEP students.... 26 Table 13 - Standard Printing Rates for Community members... 26 Table 14 - Computer Replacement Fund Eligibility Matrix... 28 Version 1.0 Page 5 of 32 June 1, 2006
3. Approvals Richard Jarvis, Provost Stephen Riter, Vice President for Information Resources and Planning Cynthia Villa, Vice President for Finance and Administration Richard Padilla, Vice President for Student Affairs Pablo Arenaz, Vice Provost, Vice President for Academic Affairs Gil Castro, Vice President for Health Affairs, Vice President for Academic Affairs Roberto Osegueda, Vice Provost, Research and Sponsored Projects Maggie Smith, Dean, University College and Vice Provost Version 1.0 Page 6 of 32 June 1, 2006
4. Document Maintenance This document shall be reviewed and updated appropriately at a minimum of once per calendar year. The approval body of this document shall be the Information Technology Advisory Committee. 5. Change History This section contains a history of significant changes made to this document. It does not contain a change history of typographical areas, re-wording, or changes that do not affect the intent, content, or context of the document. Document Version Version 1 Changes Implemented This is the original release of this document; therefore, there is no history of changes. 6. Scope and Purpose The purpose of this document is to outline the policies, procedures, and guidelines for the creation and management of academic computer laboratories that serve students at the University of Texas at El Paso (UTEP). These guidelines are necessary in order to: 1. Better serve students by providing them with consistent hardware and software, improved software access, and consistent security mechanisms) 2. Save money through better use of existing hardware, more advantageous licensing, and standardized configurations for cheaper purchasing and easier maintenance) 3. Provide students with documented and consistent efforts to maximize their technology fees paid to the university. This document does not cover all types of laboratories at the university, but is limited in scope to labs which are primarily computer labs. This policy does not cover research lab environments. Due to the ever-changing nature of technology, this document will be revised at minimum annually to address changing technology trends and student requirements. 7. Definitions of Lab Types In order to ensure a consistent definition of the types of academic computer labs, the following definitions have been adopted and will be used throughout this document. 7.1. Open Access with Unrestricted Use Computer labs in this category are available to any student with a valid Miner Card, and place no restriction on their use by students. All Open Access labs operate as single Version 1.0 Page 7 of 32 June 1, 2006
entities in the eyes of students in regards to lab equipment, software availability, printing, and other usage policies. 7.2. Open Access with College Restriction Computer labs in this category are available to all students enrolled as degree-seeking students into a particular college. These labs provide the same core software and services available within the open access labs, but may have additional software necessary for particular tasks required of students for whom the access has been restricted 7.3. Specialty / Restricted Lab Computer labs in this category provide access to a more restricted group than open access type labs. Restricted labs do not conform to the same guidelines as Open Access or Open Access with College Restriction labs in regard to software, hardware, and services available to its users. Restricted labs may be restricted on the basis of certain courses or on other variables that provide a well-defined subset of students. 7.4. Hybrid Hybrid Labs are a derivative of Open Access Lab type. Hybrid labs are assigned for computer based instruction, but they become an open-access lab when classes are not being taught. Any lab used more than 30% of its open hours for classes is considered hybrid. 7.5. All-Campus Classroom Lab Computer Labs in this category are available for classroom use by instructors of record and their enrolled students, following the reservation process established by the office of classroom scheduling. Like Open Access Labs, these labs meet standards for lab equipment, software availability, printing, and other usage policies. 7.6. Administrative Computer labs in this category provide access to everyone but are restricted for UTEP official business use only. 8. Designation of Lab Categories It is important that each computer lab at UTEP be appropriately categorized for various reasons, including visibility to students as to access privileges and capabilities, prioritization of computer replacement funds, and general campus lab management. Within 60 days of the implementation of this policy, each major entity (example: College) must provide written affirmation as to the category of each of its computer labs. Labs not identified will be placed into a non-designation category, and will be audited as to their category, use, and importance for continuation as computers lab at the university. A sample affirmation document (which can be sent from the dean, director, etc.) can be found in Appendix A Designation Letter for Lab Category on page 31. Version 1.0 Page 8 of 32 June 1, 2006
9. Open Access with Unrestricted Use All open labs shall operate as single entities in the eyes of students in regard to lab equipment and software available, printing, security, and other usage policies. For this reason, it is imperative that all open labs have similar standards for their equipment and software. Students should be able to use their MINERS username and password to use the equipment regardless of which open lab they are in. The printing process should also be the same for all students using the equipment in this type of lab. 9.1. Equipment Open labs shall maintain their equipment to the following hardware specifications. The Technology Implementation Managers (TIMs) are responsible for coordination of resources to maintain these minimum hardware specifications. Currently, the minimum hardware specifications for Microsoft Windows PCs are: Processor Memory Monitor Hard Drive Optical drives USB ports Network Interface Intel Pentium 4 Processor 512MB 15 Inch LCD Flat Panel Monitor 40 GB CD-RW capabilities 2 or more (may be located on the monitor) 10/100MB Ethernet Card Table 1 Open Lab minimum hardware specifications for Microsoft Windows PCs Currently, the minimum hardware specifications for Apple Computers are: Processor Memory Monitor Hard Drive Optical drives USB ports Network Interface 1.6 GHz Power PC G5 or equivalent. 512MB 15 Inch LCD Flat Panel Monitor 40 GB CD-RW capabilities 2 or more (may be located on the monitor) 10/100MB Ethernet Card Table 2 Open lab minimum hardware specifications for Apple Computers Currently, the minimum hardware specifications for Linux Computers are: Processor Memory Monitor Hard Drive Optical drives USB ports Network Interface Intel Pentium 4 Processor 512MB 15 Inch LCD Flat Panel Monitor 40 GB CD-RW capabilities 2 or more (may be located on the monitor) 10/100MB Ethernet Card Table 3 Open Lab minimum hardware specifications for Linux Computers. Note: Due to the varying configurations and capabilities of UNIX-based hardware, no minimum hardware specifications are provided. Version 1.0 Page 9 of 32 June 1, 2006
9.2. Software In order to provide students with the same look and feel regardless of which lab they are working using, labs should offer the identical software and operating systems. Aside from benefiting students, it will also help departments and lab managers by ensuring a common infrastructure for deployment and management of the software. The TIMs are responsible for coordination of resources to ensure software compliance. When possible, the UTEP Information Technology department will establish and manage university-wide licenses for required software. 9.2.1. For Microsoft Windows PCs: Microsoft Windows XP Service Pack 2 or newer Microsoft Office 2003 Professional SP2 (Word, Excel, PowerPoint, Access, Publisher) or newer Microsoft FrontPage 2003 SP2 or newer Adobe Acrobat 7.0 Reader Symantec Anti-Virus Internet Explorer 6 SP1 Firefox SPSS Multimedia Plug-ins (Flash, Shockwave, QuickTime) Sun Java Runtime WS-FTP WinZip 9 Equitrac Express Client Table 4 Open Lab Required Software for Microsoft Windows PCs 9.2.2. For Apple Computers: Mac OS X v10.3 or newer Microsoft Office 2004 SP2 (Word, Excel, PowerPoint) Symantec Antivirus Equitrac Express Client Adobe Acrobat 7.0 Reader Aladdin Stuff-it Expander Safari Browser Table 5 - Open Lab Required Software for Apple Computers 9.2.3. For Unix / Linux Computers: There are no specific requirements for Unix / Linux computer software in the open lab category; however, a set of guidelines is provided below in order to minimize the variance in software. Linux Preferred OS: Fedora/Red Hat Enterprise UNIX Preferred OS: HPUX, Solaris, AIX, IRIX Editors and Viewers: Vim, Latex, Ghostscript, Emacs Compilers: Java, C, C++, FORTRAN, Perl, Python Connectivity: SSH Firefox Browser X-Windows environment Version 1.0 Page 10 of 32 June 1, 2006
Adobe Acrobat Reader Table 6 - Open Lab Required Software for Linux / Unix computers 9.3. User Accounts and Domain Management To maintain a common computer environment for students, all open labs must utilize the MINERS domain for their equipment, user accounts and printing. The MINERS domain login credentials shall be required for login to all operating systems. MINERS domain membership ensures a single, consistent login for students and minimizes their need for multiple accounts and passwords. Each lab will be segregated into its own UTEP Organizational Unit (OU) in Active Directory to enable localized management of the computer resources, thus providing individual lab managers with the ability to manage locally the equipment, software, and policies. Lab managers will be delegated the ability to create new security groups for managing local lab computer resources. They will not be delegated the right to create new user accounts in the MINERS domain. Note: Unix / Linux labs in this category are not required to integrate into the MINERS domain; however, it is recommended and preferred that these labs utilize the existing LDAP authentication mechanism provided by the Information Technology department. All authentication mechanisms must adhere to the UTEP Information Security Policies. 9.4. Printing Open access labs must comply with all of the general lab printing policies as outlined in the section on page 19. 9.4.1. Printers Printers will be monitored by Web JetAdmin to provide alerts relating to toner, paper, and printer malfunctions to the appropriate groups. Minimum specifications for laser black & white print device. Print Speed Print Quality Monthly Volume Input capacity Duplex Printing Memory Network Interface 21 pages per minute or faster 600x600 dpi 50,000 pages 500 pages Yes 64MB 10/100MB Ethernet Card Media Sizes Media Types Print Letter, legal, no. 10 envelopes Paper (plain, letterhead, bond, color), transparencies, labels, envelopes, cardstock PCL and PostScript Version 1.0 Page 11 of 32 June 1, 2006
Languages Table 7 Open Lab Minimum specifications for laser black & white print device Minimum specification for laser color print device Print Speed Print Quality Monthly Volume Input capacity Duplex Printing Memory Network Interface 21 pages per minute or faster 600x600 dpi 50,000 pages 500 pages Optional 128MB 10/100MB Ethernet Card Media Sizes Letter, legal, no. 10 envelopes Media Types Print Languages Paper (plain, letterhead, bond, color), transparencies, labels, envelopes, cardstock PCL and PostScript Table 8 Open Lab Minimum specification for laser color print device 9.4.2. Print Server This server is initially configured by the UTEP Printing System Administrator. One Windows Server 2003 will act as the Document Routing Engine (DRE) per College or administrative area with the following minimum hardware/software requirements: Processor Memory Hard Drive Network Interface Operating System Antivirus Domain Membership Additional Software Table 9 Print Server specification Intel Pentium II or better 512MB Single HD>9GB with OS and spooling partitions or Two HDs>4GB 10/100MB Ethernet Card Windows Server 2003 SP1 Symantec 10.2 or newer Miners Windows Server 2003 AdminPak SP1, Equitrac s DRE, Cashier, Reporting, and Release Station components, GPMC 9.4.3. Release Stations The release station shall be a Wyse Model 1125 thin client that will connect to the terminal server release station. A release station is required and there must be at least one for every 50 computers. A release station is required if the printer will provide wireless services. Version 1.0 Page 12 of 32 June 1, 2006
9.4.4. Client Software Equitrac s client will be deployed to lab computers via group policy objects (GPOs) with the exception of Apple, UNIX, and Linux computers which will be done manually. There will be a set of GPOs applied to all lab computers in order to guarantee notifications to students from the DRE server. 9.4.5. Printing Services Lab management staff will have access to cashier and reporting tools installed on the print server. The Cost Preview window will offer helpful information to our students such as how many pages are being printed (often students erroneously believe they are only printing one page when in fact they are printing multiple pages) and their print balance. The system will also notify our students if their print jobs failed due to insufficient funds or rules that are applied (i.e. duplex printing only). The release station will enhance and facilitate coordination at the print device especially in the open labs where many students print to one or two print devices. The student s print job will be released by the student at the print device, when he or she is ready to pick it up 9.5. Hours of Operation All other open access labs should have a semester-based schedule which will be published on a website for student view. Version 1.0 Page 13 of 32 June 1, 2006
9.6. Services The following services shall be provided: (a) Access to Windows-based, Apple, or Unix/Linux computers (b) Access to all of the software outlined in this section. (c) Internet Access (d) Access to scanner (e) Black & White Printing Services (color printing services are optional) (f) Assistance in wireless network configuration for student laptops (g) CD/DVD Duplication Services (copyright restrictions apply) 9.7. Networking Requirements The UTEP Network Configuration Policy applies equally to all campus labs with access to any UTEP Information Resource. Requirements include: (h) All labs will reside inside the UTEP network firewall perimeter. (i) All hardware connected to the UTEP network is subject to UTEP IT management and monitoring standards. (j) All lab computers will use only UTEP IT installed network port connections. (k) Additional network connections will not be provided by means of external network routers, switches, hubs, or wireless access points unless approved by the UTEP IT department. (l) Users must not install network hardware or software that provides network services without UTEP IT approval. 9.8. Equipment Naming Convention All client computers should include location and UTEP inventory tag number information. This naming convention will facilitate inventory related tasks. The standard naming convention is BldgRm-UTEPtag#. For example, Lib324-121783 is a computer at the Library room 324 with UTEP inventory number 121783. Should it be necessary for a computer to be moved from one location to another, the computer s name shall be changed to reflect the new location. 9.9. Security Microsoft Windows XP settings will be enforced via Group Policy Objects (GPOs). For example, no lab client computer will act as a file sharing computer. In order to prevent unauthorized use on shared computers, other GPOs will be applied to enforce automatic logoff (5 minutes recommended, but not to exceed 15 minutes) due to inactivity, remove local profiles at logoff, and ensure remote administration. Version 1.0 Page 14 of 32 June 1, 2006
For printing servers, there will be a limited number of network communication ports opened. All printing release stations will be placed in an Organizational Unit (OU) for release stations only and a different set of GPOs will apply to make the computer a dedicated Release Station. The OUs where the release stations and print servers reside are also managed by the department or administrative area. Symantec Anti-virus will be managed by Information Technology or lab management staff provided it meets Information Security requirements. All the print devices must have the administrator password set and configured to accept only connections from the appropriate DRE server. AppleTalk protocol and Control Panel will be disabled for certain print devices. 9.10. Requirements for Students with Disabilities All lab computers within this category are required to have as part of their software suite adaptive software to assist students with disabilities. The software shall be: Kurzwiel, Jaws and Zoomtext) In addition, any lab in this category with more than 20 computers shall have at least one computer configured with special hardware and software 10. Open Access with College Restriction Open Access with College Restriction access labs provide the same core software and services available within the open labs, but also have additional software and services necessary for particular tasks required of students for whom the access has been limited. 10.1. Equipment 10.1.1. For Microsoft Windows PCs Same as for open access with unrestricted use labs 10.1.2. For Apple Computers Same as for open access with unrestricted use labs 10.2. Software Labs in this category shall meet all the minimum software requirements of Open Access with Unrestricted Use Labs. In addition, these labs will also provide access to additional software as necessary. 10.2.1. For Microsoft Windows PCs: Same as for open access with unrestricted use labs 10.2.2. For Apple Computers: Same as for open access with unrestricted use labs Version 1.0 Page 15 of 32 June 1, 2006
10.2.3. For Unix / Linux Computers: Same as for open access with unrestricted use labs 10.3. User Accounts and Domain Management To keep a common computer environment for students and allow them to work seamlessly between different lab types, all Open access with College Restriction labs must utilize the MINERS domain for their equipment, user accounts and printing. The MINERS domain login credentials shall be required for login. Each lab may be segregated into its own UTEP Organizational Unit in Active Directory to enable localized management of the domain. This provides individual lab managers with the ability to manage locally the equipment, software, and policies. Lab managers will be delegated the ability to create new security groups for managing local lab resources, they will not be delegated the right to create new user accounts. Note: Unix / Linux labs in this category are not required to integrate into the MINERS domain; however, it is recommended and preferred that these labs utilize the existing LDAP authentication mechanism provided by the Information Technology department. All authentication mechanisms must adhere to the UTEP Information Security Policies. 10.4. Printing Open access with College Restriction labs must comply with all of the general lab printing policies as outlined in the section titled General Lab Printing Policies on page 19. 10.4.1. Printers Same as for open access with unrestricted use labs 10.4.2. Print Servers Same as for open access with unrestricted use labs 10.4.3. Release Station Same as for open access with unrestricted use labs 10.4.4. Client Software Same as for Open Access Labs with Unrestricted Use 10.4.5. Printing Services Same as for Open Access Labs with Unrestricted Use 10.5. Hours of Operation These labs may establish their own hours of operation which will be published on a website for student viewing. Version 1.0 Page 16 of 32 June 1, 2006
10.6. Services The following services shall be provided: (a) Access to Windows-based, Apple, or Unix/Linux computers (b) Access to all of the software outlined in this section. (c) Internet Access (d) Black & White Printing Services (color printing services are optional) (e) Assistance in wireless network configuration for student laptops (f) CD/DVD Duplication Services (copyright restrictions apply) 10.7. Networking Requirements The UTEP Network Configuration Policy applies equally to all campus Labs with access to any UTEP Information Resource. Requirements include: All labs will reside inside the UTEP network firewall perimeter. All hardware connected to the UTEP network is subject to UTEP IT management and monitoring standards. All lab computers will use only UTEP IT installed network port connections. Additional network connections will not be provided by means of external network routers, switches, hubs, or wireless access points unless approved by the UTEP IT department. Users must not install network hardware or software that provides network services without UTEP IT approval. 10.8. Equipment Naming Convention All client computers should include location and UTEP inventory tag number information. This naming convention will facilitate inventory related tasks. The standard naming convention is BldgRm-UTEPtag#. For example, Lib324-121783 is a computer at the Library room 324 with UTEP inventory number 121783. 10.9. Requirements for Students with Disabilities All lab computers within this category are required to have as part of their software suite adaptive software to assist students with disabilities. The software shall be: Kurzwiel, Jaws and Zoomtext) In addition, any lab in this category with more than 20 computers shall have at least one computer configured with special hardware and software 10.10. Security Microsoft Windows XP settings will be enforced via Group Policy Objects (GPOs). For example, no lab client computer will act as a file sharing computer. Version 1.0 Page 17 of 32 June 1, 2006
In order to prevent unauthorized use on shared computers, other GPOs will be applied to enforce automatic logoff (5 minutes recommended, but not to exceed 15 minutes) due to inactivity, remove local profiles at logoff, and ensure remote administration. For printing servers, there will be a limited number of network communication ports opened. All printing release stations will be placed in an Organizational Unit (OU) for release stations only and a different set of GPOs will apply to make the computer a dedicated Release Station. The OUs in which the release stations and print servers reside are also managed by the department or administrative area. Symantec Anti-virus will be managed by Information Technology or lab management staff provided it meets Information Security requirements. All the print devices must have the administrator password set and configured to accept only connections from the appropriate DRE server 11. Specialty / Restricted Labs Specialty / Restricted labs provide access to a restricted group of students. These labs, for example, may restrict access on the basis of major, courses, or other attributes that provide a more limited subset of students. Due to the nature of these labs, they must be self-supporting from a customer service and financial standpoint. Therefore, it is important that campus entities provide adequate funding sources for these types of labs. Details as to the types of funding that may be required are found within the individual sections. 11.1. Equipment These labs have no specific restrictions on computer equipment. However, labs should strive to use standardized equipment as defined by Information Technology s computing standards. Due to the nature of Restricted Labs, equipment in these labs are not eligible for centralized lab management funds, and must be separately funded. 11.2. Printing Equipment These labs have no specific restrictions on printing equipment or guidelines. However, labs should strive to use standardized equipment and guidelines as defined by this policy. Due to the nature of Restricted Labs, printing equipment and printing supplies in these labs are not eligible for centralized lab management funds, and must be separately funded. 11.3. Software These labs have no specific restrictions on installed software or operating systems. However, labs should strive for using standardized equipment software and guidelines as defined by this policy. Version 1.0 Page 18 of 32 June 1, 2006
Due to the nature of Restricted Labs, software licensing in these labs for specialized software must be paid for by the entity managing the lab, and will not be included under the centralized funding for such specialized software. Restricted labs may, however, pay for additional licensing to support their lab under the same campus licensing agreement used by the other lab categories. For example, if the university has a license for 200 concurrent licenses of software package ABC, those licenses do not apply to restricted labs. If a restricted lab requires software package ABC, and the number of concurrent licenses needs to be increased to 225 to support the restricted labs usage requirement, the lab must fund separately the additional 25 concurrent licenses. 11.4. Services These labs have no specific restrictions on hours and types of services provided to students. 11.5. Networking Requirements Due to the restricted nature of these labs, additional network requirements to the ones mentioned for the Open Access Labs and the Limited Access Labs may be necessary to implement additional security. Such requirements will be identified and evaluated on an individual basis by the proponent of the Restricted Access Labs, the UTEP IT Security Officer, and the UTEP IT networking engineer. 11.6. Equipment Naming Convention There is no prescribed naming convention for computers in this category. 11.7. Security Antivirus software must be managed by the lab s own technical support staff, and is subject to audit by the UTEP Information Security Office. 11.8. Special Considerations for Restricted Labs Since Specialty / Restricted Labs essentially operate independently from all other labs on campus under this policy, there are special considerations that need to be given when classifying a lab as Restricted. There are obvious implications regarding the funding availability of hardware, software, and printing support. In addition to these areas, it is assumed that these labs may have their own guidelines and procedures for security and software licensing. As such, these labs may be subject to annual internal audits regarding their security policies for compliance with university, UT System, and state security policies, as well as software licensing audits to ensure that the labs are in compliance with vendor software licensing agreements. Note: Unix / Linux labs in this category are not required to integrate into the MINERS domain; however, it is recommended and preferred that these labs utilize the existing LDAP authentication mechanism provided by the Information Technology department. All authentication mechanisms must adhere to the UTEP Information Security Policies. Version 1.0 Page 19 of 32 June 1, 2006
12. Hybrid Labs Hybrid Labs are a derivative of Open Access with Unrestricted Use Lab type. Hybrid labs are assigned for computer based instruction, but they operate as an open lab (including college restriction) when classes are not being taught. This type of lab can be used for computer based training that may have non-utep student users. 12.1. Equipment 12.1.1. For Microsoft Windows PCs Same as for open access with Unrestricted Use labs 12.1.2. For Apple Computers Same as for open access with Unrestricted Use labs 12.2. Software Follows the same guidelines as Open Access with Unrestricted Use labs 12.3. User Accounts and Domain Management To keep a common computer environment for students and allow them to work seamlessly between different lab types, all Hybrid labs must utilize the MINERS domain for their equipment, user accounts and printing. The MINERS domain login credentials shall be required for login with the exception of training classes or events where participants are not enrolled at UTEP. Each lab may be segregated into its own UTEP Organizational Unit in Active Directory to enable localized management of the domain. This provides individual lab managers with the ability to manage locally the equipment, software, and policies. Lab managers will be delegated the ability to create new security groups for managing local lab resources, they will not be delegated the right to create new user accounts. 12.4. Printing Hybrid Labs must comply with all of the general lab printing policies as outlined in the section on page 15. 12.4.1. Printers Same as for open access with unrestricted use labs 12.4.2. Print Servers Same as for open access with unrestricted use labs 12.4.3. Release Station Same as for open access with unrestricted use labs Version 1.0 Page 20 of 32 June 1, 2006