We run OOB now, but back when we ran IB we did posture assessment on /every/ login.  The heartbeat timer was at 2 minutes - our thinking was "anything more than a reboot should require rescanning".  PC users didn't really complain too much, but the mac users let the help desk have it.  We weren't scanning them for anything so making them login everytime their computer went to sleep really erked them.

In our new OOB setup we don't clear the certified device list right now (only a month or two old).  We will make it once a month - a few days after the m$ patches come out to a) give people a chance to update without being forced and b) give m$ sometime to fix their patches.  We'll probably turn that on in the fairly near future, but other unrelated network issues have put a decent strain on our helpdesk.  

Long story short, no, users do not complain if there is a resonable explanation as to why they hae to recertify.  Especially if they now only have to do it once a month instead of once or more a day.

Regards,

Alex Lanstein
Senior Software Engineer, Transitional Data Services
Help Desk/Network Junkie, Connecticut College
Chief Coffee Drinker, LBCCHosting
860-625-4277
[log in to unmask]



-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List on behalf of Bielawa, Daniel W. (NS)
Sent: Sat 10/14/2006 5:05 PM
To: [log in to unmask]
Subject: Re: General Question on clearing the certified list
 
We clear the list every week on Sunday Morning at 4:00AM. We are running both In-Band and Out of Band. To the best of my knowledge we do not get any calls about the issue.

Daniel Bielawa
Associate Network Engineer
Network Services
Liberty University Information Services


-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List on behalf of James Moskwa
Sent: Sat 10/14/2006 10:18 AM
To: [log in to unmask]
Subject: General Question on clearing the certified list
 
This is more like a polling question. 

 

I am interested in finding out how many organizations are clearing the
list on a weekly basis and of those that are, are they running in-band,
out of band or a combination?

 

The next part of the question is what has the experience been with end
user issues during this process (i.e., are the number of helpdesk calls
been steady, increasing or decreasing over time?)

 

Regards,

-Jim

 

Jim Moskwa

Manager Networks & Security

Information Technology Department

Johnson & Wales University

8 Abbott Park Place

Providence, RI 02903

Office: 401-598-1556

Fax: 401-598-1329

Email: [log in to unmask] <mailto:[log in to unmask]>