Securing workstations of developers and software testers

What do you do to manage workstations of workers who need admin rights on their workstations to do their jobs (such as developers and software testers who are frequently installing and uninstalling software, running scripts, compiling code, editing registry on theei workstation etc.?The software developers have admin rights and UAC disabled so UAC prompts do not interfere with running scripts on their local systems unattended.Since the company does not have any centralized virtual machines for users, the users are also creating their own local Windows and Linux VMs with VMWare or Virtualbox running on their local workstations so they do snapshots and rollbacks and bypass security policies while doing development and testing. That is the main purpose of these VMs, but it's likely they are also being abused to bypass security for...
This topic first appeared in the Spiceworks Community

Harvard University recently announced that on June 19, 2015, it discovered an intrusion into the IT networks of the Faculty of Arts and Sciences and Central Administration."Since discovering this intrusion, Harvard has been working with external information security experts and federal law enforcement to investigate the incident, protect the information stored on our systems, and strengthen IT environments across the University," university provost Alan Garber and executive vice president Katie Lapp said in a statement."At this time, we have no indication that personal data, research data, or PIN System credentials have been exposed," Garber and Lapp added. "It is possible that Harvard login credentials (username and password) used to access individual computers and University email accounts have been exposed."...Read More
Read More

Similar Messages

Safari, Mail and Software Update crash upon open after S/U 2006-004

After installing the latest Security Update, Mail, Safari, and Software all crash upon open. nother strange this is that when I do a FIND on Safari, it seems to be in the Root "/" directory. The only way that we can get onto the inter is by using IE. I have also tried to create another user to see if that helps, but Safari just shows up as a "?" in the dock. When I goto applications, and open it there, it still crashes under the new user. Itunes will successfully go to the Music Store.

I reloaded the Mac OS on the mac that was having the problem.

I am putting together a proposal for a Final Cut Pro Workstation to use with a tapeless HD camera. Can anyone suggest the best camera (in the 5-10,000 dollar range) ? What hardware and software should I include in the package?

I am putting together a proposal for a Final Cut Pro Workstation to use with a tapeless HD camera. Can anyone suggest the best camera (in the 5-10,000 dollar range) ? What hardware and software should I include in the package?

This is quite an open suggestion, but here are some ideas which might get you started. There are good HD cameras in your price range from Sony, Panasonic and Canon (and maybe other manufacturers). Tapeless formats vary. I have only worked with Sony XDCAM which seems pretty good to me. File sizes for material shot at 35MBS are not too huge and, with the free Sony transfer and conversion programme, are easy to bring into the computer via USB direct from the camera or from a fairly inexpensive converter. The Sony XDCAM EX3 can produce results well up to broadcast quality.
As to hardware, you'll need a powerful MAC - iMac, Macbook Pro or MacPro with 4GB or more of RAM and a good video card. Softwarewise, FCPX is quite a bit cheaper than FC Studio 3 and of course it's 64bit and can make better use of multi-core machines than FCP7. It's also designed to handle HD formats with less hassle than FCP7 and is matched to the latest versions of Motion and Compressor. But you'd probably be wise to search reviews of FCPX before you make your choice - it has some issues.
A good HD monitor will be essential and, for colour correction etc, you may want to consider a second monitor or HD TV foe editing. ( A MacPro is generally the best machine to connect a second monitor to).
This should give you a good editing system, but there are many other things you could add (Photoshop, professional sound monitors, etc)
Hope this helps a bit.
Jonathan

HT1338 Hi, I'm trying to load Facetime on my MacBook and it says "You are missing a critical security patch. Please use Software Update to install Security Update 2010-005". I've checked and all my software is updated. What do I do?

Hi, I'm trying to load Facetime on my MacBook and it says "You are missing a critical security patch. Please use Software Update to install Security Update 2010-005". I've checked and all my software is updated. What do I do?

First off, iOS 5 will not run on Macs. You need to give us your Mac OS X on your Mac to determine which security update you need. Go to Apple menu -> About This Mac. And then read the link here:
http://support.apple.com/kb/HT1222

Canon 860 Series (Pixma) Printer Problems with OSX 10.8 (Mountain Lion) – links to Canon Support Site with Drivers and Software with install tips

After spending several hours sorting out Canon Pixma OSX problems here are my thoughts:
Canon 860 Series (Pixma 868) Printer Problems with OSX 10.8 (Mountain Lion) – links to Canon Support Site with Drivers and Software with install tips
Problem:
- New imac and MacBook Pro 2012 (OSX 10.8.2) had a problem using Canon Pixma 868 printer on network and would not scan or print using Canon Pixma software (Pixma MP Navigator 2.1 & Photo Print), which has advanced scanning and photo printing functions.
- When I connected the canon printer to my imac, OSX 10.8.2 automatically downloaded and installed drivers for Canon 860 series printer. I could then add the new printer (select ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”) and printer would work while connected via USB but could not get to print or scan over network wifi.
- The original Canon 860 Series CD does not work with 10.8 and the manual / online instructions did not make sense (as based on CD install).
Solution:
1) Install Canon Printer Drivers and Software (from official Canon site)
Go to canon support site, review FAQ, then download and install following Pixma 860 Series software & drivers for OSX 10.8 (links see below). The version I downloaded is in brackets but check for updated version. Full instructions are below.
Canon 860 Series Drivers & Software for OSX 10.8 Mountain Lion:
The base software and drivers needed for using Canon 860 Series on Mac OS X 10.8 (USB) are
1 Printer Driver
(Canon MX860 series CUPS Printer Driver Ver. 10.67.1.0 (03-Aug-2012))
2 Scanner Driver
(Canon MX860 series Scanner Driver Ver. 14.11.4a (03-Aug-2012))
3 Network Tool
(Canon IJ Network Tool Ver. 4.1.0 for Intel Mac (27-Dec-2012)
Canon Software for using advanced printing and scanning functions (while connected to network)
4 Solution Menu
(Canon Solution Menu Ver. 1.4.1 (27-Jul-2012 ))
5 MP Navigator EX
(Canon MP Nav EX Ver. 2.1.3 (02-Auf-2012))
6 Easy-PhotoPrint EX
(Canon Easy-PhotoPrint EX Ver. 4.1.6 (21-Jan-2013 ))
Canon Support (HK) – check your local site
http://www.canon.com.hk/en/download/main/index.do
Select Product and drivers from support site eg http://support-hk.canon-asia.com/
1. Choose a product category
Multifunctional Printers
2. Choose a product series
Pixma
3. Choose a product model
Pixma MX868
4. Choose type of document
Downloads or FAQ
If you have problems installing the software under 10.8, see the FAQ on Canon site. You will need to allow software installs from “unidentified developers by using “Control” Key or by changing your system preferences)
2) Check Canon Printer and Software Working while connected via USB
Once you have downloaded and installed drivers and software and restarted computer, check that the printer and Canon Pixma software (Pixma MP Navigator 2.1 & Photo Print) are working via USB. Open the Canon IJ Network Tool App (Applications / Canon Utilities /IJ Network Tool / Canon IJ Network Tool App) and make sure you can see the Canon MX 860 series (xx.xx.xx.xx.xx.xx) and that it shows the correct SSID Wifi settings (under the Canon IJ Network Tool App ‘Setup menu’). This is normally done as part of the automatic install but worth double checking
3) Add new network printer using ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”).
After you have checked USB printing turn off printer, unplug the USB cable and shutdown the Canon IJ Network Tool App.
Then turn the printer back on and wait 30s. Then add a new printer using ‘apple menu’ / ‘system preferences’ / ‘print and scan’ / “+”). Once you select “+” (add new printer), wait 10-30s for the Wifi Networked Canon MX 860 Series printer to appear in the new window eg Canon MX 860 series (xx.xx.xx.xx.xx.xx) (Kind: “Canon IJ Network”)
DO NOT ADD THE MX 860 SERIES BONJOUR SCANNER (the Bonjour Scanner is the built-in software, is not needed and often appears first on the add printer list). The Canon scanner can be accessed used through the MP Nav EX Ver. 2.1.3 software (which has much better functions)
You will now have two Printer Canon MX860 (USB) and Canon MX860 (Wifi / Network). Set the Canon MX860 (Wifi / Network) as default and test print and scan
If the Wifi Networked Canon MX 860 Series printer does not appear, check the printer and make sure that the printer can see the wifi network. On the printer select Menu / Settings / Device Settings / Lan Settings / WLAN Setting List. It should say WLAN Active, identify the SSID and have an IP address
If the printer can not see the Wifi Network, plug the USB cable back in, then open the Canon IJ Network Tool App (Applications / Canon Utilities /IJ Network Tool / Canon IJ Network Tool App). Make sure you can see the Canon MX 860 series (xx.xx.xx.xx.xx.xx) and that it has your SSID settings (under setup), if it has this info, restart the computer and the printer and try again

Hi, thaks for response, meant to post as a discussion (not question), wanted to save others time if they get the same problem

Memory errors and software detection

I have the 645EMax2 and admittedly, have a power supply issue in the process of resolution. However, I have two 512mb ddr 333mhz memory sticks from Seitec. I did a scan with DocMemory and Memtest86. Both gave errors at 485mb. I swapped them round and now have errors at 512+485 (ie 997mb) - showing it to be the stick and not the holder. Took it back to the supplier and they tested with GoldMemory (freeware I guess) and found no errors.
So, would the results depend on processor speed and or BIOS config. I agree this is not conclusive til I test with a new power supply but any ideas on the realtive merits of these software testers would be welcome. Any ideas in general would be welcome.
thanks

ps. not all ram (makes and models) will work with more that 1 stick of ram (ps. boot windows xp play game (battlefiled 1942(use lots of ram)
eg kinston 256 tiny big modulals (3x256 sticks) ok in 6547 (645) sis motherboard
apcer 512 stick one works / 2 stick fails to play game with out crashing at random.
make sure you set you timings to 2.5 safe(4) rate rame speed 333 etc

My workstation won't see Software Updates from my server

Hi guys,
I'm toying around with Software Update Services. I've setup the Software Update service on my Xserve, and I've downloaded the update packages & made them available for clients to download.
The trouble is, when I run Software Update on my workstation, it still seems to connect to Apple for updates; instead of the workgroup server. How do I troubleshoot this? If I look on the Xserve, there is nothing in the Server Admin logs for Software Update that relate to my workstation failing to connect. In Workgroup Manager, I have the Preferences set for my workstation where "Software Update server to use" is set to "http://bugs:8088". With Safari on my workstation, I can open http://bugs:8088 and see the directories where the packages are stored... yet Software Update ignores them!
The Xserve is running OS X Server 10.4.2 and my workstation runs OS X 10.4.5. Any suggestions? Thanks!
Mac OS X (10.4.5)

I to am having the problem with my test client not getting updates from the server. I am the lone IT man in this company so I've had to work slowly to get my Mac server online. I am following the System Imaging and Software Update Administration guide. It said to enable the service, enable and mirror the updates I wanted. For an unmanaged client (like this one) do:
defaults write com.apple.SoftwareUpdate CatalogURL http://ifire.local:8088/. Each time software update runs I get no new software available. I used terminal with softwareupdate -l and followed the process. I get 'Unable to use product xxx' on everything and the line that followes is 'Failed to load distribution file xxx.' I know there is one update for me, Quicktime.
!!HELP!!
G5 Mac OS X (10.4.7)

Since The Security Update, my Adobe CS2 software will not function properly. Is it common with everyone?

I am having issues trying to run my adobe cs2 programs cause it says there is a disk error and will crash when I go to save something. All this occurred after I made my firmware update for the security as of tonight, and earlier in the daytime, it was functioning propperly.

Simmilar problems.Indesign CS3 crashes if I try to place anything or save. Freehand 10 crashes if I try to place, export or save as, though I have managed to save some files. It seems just about anything that accesses the disc crashes these apps now, apart from simply opening the files. Some Freehand files wo'nt even open now, crashing as soon as the app starts up. These are all documents with placed content, again necessitating more disc activity I suppose.
This has all suddenly occured since tonight's security update.
How the **** does the worlds most successful software company manage to screw up so ineptly? A while ago I suddenly lost access to most of my fonts within all my Adobe and Microsoft programs, immediately following one of Apple's security updates. I have never managed to resolve this issue. I was left with only Truetype fonts available in these programs, though the missing fonts remained available in other software, including Apple's own apps such as textedit.
I have an old Mac running old system software. It is a life saver. I don't let the internet and Apple's risky 'updates' anywhere near it. If anybody knows a better solution than using an antique machine running out of date software I'd love to know.

Antivirus, antispyware, and software firewall for OS 10.3

Finally migrated one of my Macs to OS X (10.3), so now I'm surfing w/o a life jacket. What do most Panther users use for virus protection, spyware protection, and for a software firewall?
Thanks in advance for your recommendations.
Carl B.

Carl:
There is one known "virus", is you can call it that, for Mac OS X, a weak trojan called Oompa Loompa. You have to download it, open it, authenticate and install it. Anyone who goes to all that trouble...
Like many, if not most, mac users, I have never had virus or spyware protection. No problems either. Mac OS X has built in security, that if utilized properly, can give you a very high level of protection. A level no a-v software can give.
Here are some articles I put together that can get you on the road to security: Maintenance, Safe Practices, and OS Hardening. You don't have to do it all at once, but even if you begin with regular maintenance procedures and a good backup strategy you'll be ahead of much of the pack.
Good luck.
cornelius
PismoG4 550, 100GB 5400 Toshiba internal, 1 GB RAM; Pismo 500 OS X (10.4.5) Mac OS X (10.4.5) Beige G3 OS 8.6

10.6.4 Security Update 2010-05 and Flash Disk Problem

New Mac and System 10.6.4-- Software update notified me of Security Update 2010-05, and I downloaded yesterday without remembering I had a flask disk in 1 of 4 USB ports, using it to organize data when the hard disk on my older IMac (3 years) crashed. Now if I try a restart with the flash disk in 2 of the 4 ports (including the one it was in or the one with the printer connection), I get a blank gray screen, and must do a cold restart. If the flash disk is in one of the other two remaining ports, no problem. If another flash disk is in any of the 4 ports, no problem. I have reinstalled the security update and reformatted the problem flash disk without any change or success

Hi chgr5, and a warm welcome to the forums!
If you don't get an answer in the Tiger/10.4 forums where we are now, you might try...
http://discussions.apple.com/forum.jspa?forumID=1339
Whew, that's pretty strande, if it were Tiger/10.4 I'd suggest this, but my 10.6 iMac died...
Safe Boot , (holding Shift key down at bootup), use Disk Utility from there to Repair Permissions, move these files to the Desktop.
PS. Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.
/Users/YourUserName/Library/Preferences/com.apple.desktop.plist
/Users/YourUserName/Library/Preferences/com.apple.recentitems.plist
/Users/YourUserName/Library/Preferences/com.apple.finder.plist
n Finder, select Go menu>Go to Folder, and go to "/volumes".
Volumes is where an alias to your hard drive ("/" at boot) is placed at startup, and where all the "mount points" for auxiliary drives are created for you to access them. This folder is normally hidden from view.
Drives with an extra 1 on the end have a side-effect of mounting a drive with the same name as the system already think exists. Try trashing the duplicates with a 1 or 2 if there are no real files in them, and reboot.
Reboot & test.

Question Regarding Security Updates 2006-005 and 2006-006?

Okay I just noticed Apple Security Update 2006-005 and 2006-006 are available for download. Has anyone had any problems with these updates? I remember the Security Update 2006-001 was a nightmare for me -- Safari was broken after that update I had to do a complete OS reinstall then re-update to Mac OSZ 10.3.9 Panther and I only want to update if the likelihood of any problems occuring is very slim. Anyone running Mac OS X on PowerPC chips (i.e. using a PowerBook, an older iMac, Mac Mini, PowerMac etc) or on Intel chips (i.e. MacBook Pro, the new iMacs, new Mac Mini's etc) with Mac OS X Panther, Mac OS X Tiger etc having any problems with either update?

(10.3.9 Client) seems to have broken my CS2 Version Cue after loading Security Update 2006-006 via Software Update - 27MB or something.
Though afterwards all apps (Illustrator 12.0.1, Acrobat 7.0.8, PS 9.0.1 and InDesign 4.0.4) open and run fine, Version Cue disappeared from the Desktop Menu and System Preferences and says it's no longer installed, all this immediately after loading the Update and restarting.
Two restarts and a Repair Permissions haven't resolved the issue. I've downloaded the stand alone Update and have run that but without any luck. I'd had no history of any trouble with any Security Update prior to this, and have run good maintenance schedules.
I've not seen any other posts or related issues to mine, so maybe it's just my isolated event?

IPhone stays on Edge even though secure wifi is present and connected

My phone connects to unsecure wifi fine. If I try and connect to a secure network, enter the correct ID, the phone says I'm connected and I get the wireless symbol for about a minuit before it switches back to Edge. Unsecure wifi networks no problem. The same thing happened on three different secure networks - connected and then switched to Edge? Has anyone else experienced this? Is this a software issue with iPhone or am I missing something? We have numerous computers connected via the secure wireless network working fine. Any advice would be appreciated. Thank you.
iPhone

The Solution to the problem that you having is the following:
"Go to" SETTINGS
Wi-Fi
"Arrow over on the network which you are trying to connect"
Forget this Network
"Confirm" Forget Network
"Go back to" Wi-Fi Networks
"Choose the network which you are trying to connect"
*"In the Security box arrow over and choose" WEP hex or ASCII
"Now press" Enter Password
"Now enter your WEP Key etc..."
This should allow you to stay connected to a security protected network.

IChat won't connect and Software Update will not run.

Hi, all,
Sorry if something like this has already come up, and I apologise if this is the incorrect forum to post this in. I searched and didn't see anything identical to my issue (I didn't search very hard, but I did search), so I figured posting a topic might be the best way to go. I know this is two problems, but I decided to post it in the iChat forum in case the two were related.
I bought this computer and received it yesterday. It's a 15 inch MacBook Pro, i5, 10.6.4. It worked fine this morning, software update ran, ichat worked fine.
Now, when I try to connect to iChat, it takes a good ten minutes to try to connect, and then it sends me an error that says "You have been disconnected from iChat services. An internal error occurred that disconnected you from all iChat services. To resume using iChat, log in again to your instant messaging account." So, I quit iChat, and restarted it, but now it won't even show me my buddy list saying "connecting....". It just starts and sits there, and all the options are greyed out. I tried going into the security settings and changing the port to 443, but that's greyed out, too.
So I thought I would try to run software update, and software update opens, but it doesn't ... go. It shows the little blue bar, and it's not frozen, but it doesn't advance at all, and it never gives me the option to go to the "install updates" screen because it doesn't check. I went into my network settings to check my connection, and I'm definitely connected to the internet (I mean, I'm typing this ON the MacBook Pro right now), but the panel says I'm not. I can hit "cancel" and quit software update.
I already reinstalled the OS and the update to 10.6.4, and it's still the same issue.
Help, anyone? This computer is brand new and I really don't want to have to erase and reinstall.
Thanks

Hi,
Welcome to the  Discussions
On the changing the port front stop off on the Account Info tab on the way a deselect "Use this Account" to take it Off Line. (you can get half way states)
You should then find the port 5190 is dark text so it can be edited.
You should press the Enter key to "Set" the port change (this is different to earlier versions of iChat)
Also try it with the SSL option disabled.
If this is an AIM Login (AIM or Apple Name) their SSL server is more prone to "Falling over". iChat should default to using an Non SSL Login on a reconnection front it can be subject to a time frame issue.
Next check the Mac Firewall (System Preferences > Security > Firewall tab)
If this is On in Snow Leopard you have to go to the Advanced Button and Allow Signed Apps and Add iChat to the list.
I favour the last suggestion as this may also block Software Update (Although I nm not sure how you got to 10.6.4 although it is a separate Download you can get).
I would also check you have DNS servers listed in System Preferences > Network > Advanced Button > DNS tab
9:14 PM Saturday; September 25, 2010
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

Security Issue - LDAP Authentication and supply of empty passwords

Security Issue with OC4J and JAZN LDAP Realm
Product Versions:
OC4J 9.0.3
Infrastructure 9.0.2.1
When using form based authentication or basic authentication in a WebApp, OC4J authenticates any existing user that as a password defined with an empty password.
Example: If you have a user with the username "user" and password "password". In the login of the WebApp if you supply only the username, OC4J authenticates the user.
Notes:
- If we supply a wrong password we are not authenticated
- If we supply the correct password we are authenticated.
To reproduce the problem, I have used Oracle callerInfo jazdemo, configured to used the JAZN LDAP Realm named sample_subrealm, that is installed with 9ias infrastructure
Notes: If I use JAZN XML Realm everything works as expected.
Bruno Antunes
Java Software Engineer

Jeremy - You'd have to use database authentication to achieve that. Create a DAD without specifying a username/password and change the app's current authentication scheme to DATABASE. Then users can login using their database account credentials. LDAP won't be used when you do this so you'll have to keep the database account passwords in sync with LDAP somehow if that's important.
Scott

Can't Install Security Update 2007-009 With Software Update

I tried to install Security Update 2007-009 on a 10.5.1 G4 system, but the installation fails with an "unknown error". Here are the details:
1) Software Update downloads the file and ask to Restart
2) Get to the blue screen
3) See these messages "Preparing target volume" and "Configuring installation"
4) Get this error message:
The update "Security Update 2007-009" can't be installed.
The installer encountered an unknown error that failed the install. Contact the software manufacturer for assistance.
5) Restart
I then deleted the "Security Update 2007-009" folder from Library->Updates and tried the update again, but got the same error.
Any idea what's wrong and how to fix it?
Thanks.

I installed Security Update 2007-009 via Software Update and received the following error:
"Security Update 2007-009 can't be installed. The installer could not validate the contents of the SecUpd2007-009 package."
I ran Disk Utility (twice) to ensure that the permissions were in order and received the following report on both occasions:
Repairing permissions for “Macintosh HD”
Warning: SUID file "usr/libexec/load_hdi" has been modified and will not be repaired.
Warning: SUID file "System/Library/PrivateFrameworks/DiskManagement.framework/Versions/A/Resources /DiskManagementTool" has been modified and will not be repaired.
Warning: SUID file "System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Reso urces/Locum" has been modified and will not be repaired.
Warning: SUID file "System/Library/PrivateFrameworks/Install.framework/Versions/A/Resources/runner " has been modified and will not be repaired.
Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/readconf ig" has been modified and will not be repaired.
Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/writecon fig" has been modified and will not be repaired.
Warning: SUID file "usr/libexec/authopen" has been modified and will not be repaired.
Warning: SUID file "System/Library/CoreServices/Finder.app/Contents/Resources/OwnerGroupTool" has been modified and will not be repaired.
Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.
Permissions repair complete
Regarless, I downloaded the update directly from Apple Support located here:
http://www.apple.com/support/downloads/securityupdate2007009111051.html
And 2007-009 installation complete without a hitch. I have no idea what is going on with the permissions (any recommendations) but I have not found any other problems since this update was installed.
I hope this helps.

Securing workstations of developers and software testers

Similar Messages

Maybe you are looking for