Versions Compared

Old Version 3

changes.mady.by.user Matt Wilson

Saved on

compared with

New Version Current

changes.mady.by.user Matt Wilson

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleAppleID / iCloud Disabled

AppleID and iCloud are not supported to be directly logged into on campus owned macOS computers. They are not approved for storage of campus resources , documentsthat do not fall under Category 1 in SUNY Fredonia Data Storage Services , or backing up of Desktop/Documents on campus owned devices.

Most functions of iCloud can be utilized through https://www.icloud.com

Expand
titleDisable Handoff

Handoff allows you to continue working on a document or project when the user switches from one Apple device to another. Disabling Handoff prevents data transfers to unauthorized devices. This also requires the device being logged into AppleID, which is not supported by the campus.

Expand
titleDisable Password Autofill (as part of the OS)

macOS allows users to save passwords and use the Password Autofill feature in Safari and compatible apps. To protect against malicious users gaining access to the system, this feature MUST be disabled to prevent users from being prompted to save passwords in applications.

Expand
titleDisable Password Sharing

The default behavior of macOS is to allow users to share a password over Airdrop between other macOS and iOS devices. This feature MUST be disabled to prevent passwords from being shared.

...

Expand
titleDisable Location Services

The information system MUST be configured to provide only essential capabilities. Disabling Location Services helps prevent the unauthorized connection of devices, unauthorized transfer of information, and unauthorized tunneling.

Expand
titleSystem Wide Settings (Preferences)

Some Preference Panes in System Settings/Preferences contain settings that affect the entire system. Requiring a password to unlock these system-wide settings reduces the risk of a non-authorized user modifying system configurations.

The main spot this could impact end users would be the time zone. For this reason, a policy has been configured in Self Service (available in the Applications folder) to allow for modifying of the time zone without administrative privileges.

If other issues arise within daily computer usage that seem to be an issue, please do not hesitate to put in a request to Tracker@fredonia.edu and it can be reviewed and a potential solution applied to the systems.