EnterApp

Web Services Council

Computer Services Access Security
Network Services Account Information

Introduction

This web page to provides information regarding the Network Services section of the security document sent regularly via Email to those individuals responsible for review access security. This includes an explanation, example listing, definitions, and action recommendations.

Explanation

The Network Services Accounts listed in the document you received were linked to you in one of two ways:

  1. Department -- thru searching multiple computer and database systems such as CWIS, Human Resources, and Computer User Tracking System, each account is linked to a group or department. If you received this type of security document then you have been identified as the main contact for this group or department.
  2. Responsible Account Holder -- some non-student computer accounts are created without any record within the HR system. Other special departmental accounts are also created as needed. When this occurs an existing computer account holder, usually a permanent full-time employee of the university, is identified as responsible for the account. If you received this type of security document then this indicates that you have been designated as the responsible account holder for the accounts listed in the document.

You may find an account in the list for someone who no longer works for your department but may continue to work for the university in another department. Please read the When to Take Action section below to determine when concern/contact is warranted.

For department related security documents the Network Group is found labeled as "Group:". In the example found below the group name is ACCOUNT as seen in the label (Group: ACCOUNT).

Example Listing

(Group: ACCOUNT)
Network Services Section
Account Information
Login Account Name Expires Last Access *Services
doejane Doe, Jane No Not Used C+
smitjohn Smith, John M 12/01/07 7/31/05 C+,T+,M,R
browbill Brown, Bill No 7/31/05 C+,A+,F,M,L,R

Heading Definitions

Network Account

The string of characters or numbers (normally 8 or less) utilized to login to various computer services. In the example above doejane, smitjohn and browbill are the network account entries.

Name

The full name identified with this network account.

Expires

The date listed indicates when one or more of the network services for the account will expire and be disabled. In the example above the first and last accounts, doejane and browbill, have no expiration date set. The second account, smitjohn, expires December 1st, 2004.

The account holder and responsible account holder, if applicable, will receive an Email at both 30 days and 15 days prior to the disable of the account.

Please note: all network services may NOT expire on the same day -- the date shown is the closest.

Last Access

Dates are available to indicate when a service or computer was last accessed. This date shows the most recent access date from all Services listed for the account. In the example above the first account has not been accessed according to our records and, consequently, Not Used is listed. The second and third accounts were last accessed July 31st, 2002.

(Note: Last Access Dates for CWIS[C], TAS[T], and Remote/Modem Access[R] have been collected since the summer of 2000. FS Tools[F] access dates were first collected in the summer of 2002. Email[M] access dates were first collected in October 2003. We are currently unable to collect the Last Access Date for the Calendar[L] service.)

Services

This column attempts to identify the computer services and/or systems the network account can access. They are identified with one character codes. The possible computer services are as follows:
  • C = CWIS

    Indicates the account has access to the CWIS Unix system. Almost everyone who has an ISU network account has access to CWIS, even students. Therefore this access should not generally be a concern. However, the account may have access to restricted departmental files (+). CWIS provides many services including web services for personal and departmental publishing along with some file sharing.

    More information on setting up your Y: Drive is available in our Knowledge Base or you may contact the Help Desk at 282-HELP for assistance.

    For information on C+ go to information on "+" (plus) below.

  • A = ADWin

    The account has access to the Administrative Windows 2000 server. This service provides a platform for applications requiring a Windows 2000 server.

    Generally, students should not have access to this service.

    For information on A+ go to information on "+" (plus) below.

  • T = TAS

    Indicates the account has access to the TAS Share directory service on the CWIS Unix system for departmental file sharing, storage, and backup.

    Every account having access to CWIS has access to TAS automatically and can map a drive through TAS. However, if TAS is listed as an available service for an account, this indicates the account has full access to the TAS Share of the department or group reported.

    More information on setting up your Y: Drive is available in our Knowledge Base or you may contact the Help Desk at 282-HELP for assistance.

    For information on T+ go to information on "+" (plus) below.

  • D = DocMan

    The account has access to the DocMan service. DocMan is our Document Management product providing online report archival and retrieval as well as imaging and other capabilities.

    For information on D+ go to information on "+" (plus) below.

  • F = FS Tools

    Indicates the account has access to Faculty/Staff Tools for retrieving student information, generating class lists, submitting grades, entering purchase requisitions, viewing personal information, etc.

  • M = Email

    Indicates the account has access to ISU Email services for sending and receiving Email. Again, nearly all university personnel have an Email account.

  • L = Calendar

    Indicates the account has access to the ISU MyCalendar service for scheduling personal and group meetings along with resources such as a conference room. Tasks can also be managed with this service. PDA syncronization is also provided. This service is available to all university personnel and students upon request through the Help Desk.

    More information is available in our Knowledge Base.

  • R = Remote/Modem Access

    Indicates the account has access to most ISU services from home via modem including Email and internet access. This service is also provided as a service to most university personnel.

    Note: The modem pool for faculty and staff is separate from the modem pool provided students.

  • W = Wireless (also DHCP)

    Indicates the account probably has access to the ISU wireless network through the use of a wireless network device such as a notebook or PDA. This may also indicate in a few situation that the account is utilized on a standard hardwired computer workstation utilizing DHCP services to receive a dynamic IP address.

    Wireless network connectivity is provided as a service to university personnel as well as students who have paid for a full computer account.

  • "+" (plus)

    Indicates the account has access to shared departmental files.

    (Note: This information is not applicable for the Responsible Account Holder document.)

    If CWIS access is listed (C+) the account has access to the departmental web documents. Probably only your web developers should have access to these files. File access is normally provided via a folder on the Y: Drive.

    More information on setting up your Y: Drive is available in our Knowledge Base or you may contact the Help Desk at 282-HELP for assistance.

    If ADWin access is listed (A+) the account has access to a shared application space on a Windows 2000 server.

    If TAS access is listed (T+) the account has access to the departmental shared files on CWIS. Usually departmental documents are maintained on this system for sharing within the department in addition to central storage and backup. Most often, a folder on the Y: Drive is utilized for accessing this service. (See TAS above).

    More information on setting up your Y: Drive is available in our Knowledge Base or you may contact the Help Desk at 282-HELP for assistance.

    If DocMan access is listed (D+) the account has access to departmental or application share listed. (See DocMan above).

When to Take Action

If any one of the following situations listed below exist please contact the ISU Helpdesk to have them correct the access. Sending an Email to the ISU Helpdesk, noting changes, is the preferred method of contact. If the situation is considered critical please contact the ISU Helpdesk by phone at 282-HELP.

Thank you very much for your assistance.

(Updated 04/06/2006)