In 2022, we adjusted university-owned computers to have partially managed internet browsers (Google Chrome, Firefox, Microsoft Edge, Safari). We made the decision to only partially manage the browsers, while leaving many settings unlocked for users to change. Our restrictions are minimal in comparison to many peer intuitions’ computer management policies. We administratively set a few of the settings for a few reasons:
- To provide an accurate and current set of bookmarks across campus computers, so that users could easily access key resources and sites (historically, they had been “hard set” into the computer during deployment and became outdated/inaccurate).
- For a campus-wide initiative to switch everyone between mySU to myNest, to ensure that they have easy access to campus resources in the new campus portal.
- To automate Single Sign-In (SSO): more SU applications are becoming web based and require logging into a website. We are trying to eliminate/reduce the number of times users need to log into sites/applications. With the new configuration, the SU SSO-configured sites now inherit the windows credentials to avoid additional login prompts.
- To ensure browser updates: internet browsers are becoming an increasingly significant attack method for cyber security attacks. Historically, we were not able to centrally manage that the software version of the browser application was being kept current, we can now ensure that your browser is updated to remediate the latest security vulnerabilities found in the browser software.
- To improve general security: other security concerns were emerging as users go against best practices or misconfigure internet browsers (storing passwords or credit cards, installing malicious browser plugins, disabling security features, remote access features being exploited, etc.), which was leading to an increase in computer malware infections or compromised user credentials. We need to carry out organizational PC management best practices by managing some of these settings for the campus community.
Due to the nature of the browser being managed, we cannot accommodate every request for changes; either because the management tools do not allow every specific setting to be configured, or due to needing to create a universal setting balanced for accommodating the majority of the campus community, balanced with university initiatives and security best practices.
You may submit feedback, which we will add to our list and try our best to incorporate it into future adjustments to the configuration.
Thank you for your patience and understanding regarding these configuration settings.