We do something similar at the University I work for. We have a way to quar. machines causing problems. If their weekly bandwidth usage (upstream) exceeds 8 gigs they are disabled, and via some DNS redirection system they are redirected to a page explaining what happened and how long they will have to wait to get turned back on whenever they try to go to any website.

It's pretty much the same for viruses. If a user is disabled for a particularly bad virus they may be required to format/reinstall before getting back on the network. However, commonly they can just preform what we call a security cert.

This security cert is composed of installing AntiVirus software that the University has purchased, turning on the windows firewall, doing windows updates, and running a virus scan. After the user does this or brings the computer in to have this done the computer is enabled.

If the computer requires a format/install we ususally have the user bring in the computer to us and sign an agreement form for a Windows XP site license. After they do this we can use an Unattended installation CD we've made w/ sp2 slipstreamed into it. It also has all of the Windows updates including the recommended ones, spybot and ad-aware, and our AV program all in the Unattended install. This makes the turn around time fairly short. It takes around 40-60mins to finish a machine, including downloading missing drivers. And, most of that time requires no intervention as Windows is just installing.

When the students are moving into the dorms we have a temporary service start called ResNet. We hire temp employees and give them training so that they can go to users' dorm rooms and help them troubleshoot network connection issues. While this is going on, we send these people out to the rooms of users' that are disabled for viruses/worms to aid w/ removal.
If a user needs a format/install at this time there are 3 different stations set up at 3 central dorm locations. At these stations we have a KVM switch w/ XP unattended installs. So the user can bring their tower/laptop down do the base and we can do the deed and have the computer back to them within a few hours.

The whole process is rather slick.

Further, in each dorm room, when a person moves in, they'll find a copy of our "technology survival guide." This has links for places to obtain AV software, spyware removal software, etc. It also has recommended computing practices and descriptions of common problems like spam and how to avoid receiving it.

With the above system and preparations we are able to handle the rush of incoming students quite well. Still, it's no fun, but at least it's something we can manage.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/267/28587#28587