Your password protects your account from unauthorised access.

• Do not let anyone else know your password.
• Do not store your password in a file on your PC.
• Do not write down your password or leave it stuck on your desk or PC.
• When changing your password (which you should do regularly) do not re-use an old password.
• Ensure that your password has a minimum of 7 characters where these characters are a mixture of letters, numbers and other characters (such as #@[] etc ).
• Use a password that is not in the dictionary.

Passwords will automatically expire once per year and you will be asked to change your password. After three attempted failed log-ins you will not be able to log-in again for a further 10 minutes. This discourages the automatic password detection programs.

Physical Security

When you leave your desk/office ensure that your lock the office, if this is not possible then log off of the PC or use a password protected screen saver. Terminate any active sessions to University servers (such as the Student Administration server).

PC Security

For your PC to be connected to the University network it must be running anti-virus,  anti-malware, intrusion detection etc software (such as Microsoft's Security Essentials) with the latest updates and also have the latest Operating System patches. ITD will not connect a PC to the University network unless it has such protection and will disconnect any PC found not to have such protection. This is to ensure that an individual computer does not infect other computers on campus.

PC Sharing

Sharing files from your own PC to other staff or students (particularly students) opens your PC to a potential hacking risk. Do not share out files from your own PC to students - use a fileserver provided by ITD or by your department instead. If you do find that you must share out files on your own PCs to students do not keep any confidential files on the PC as well , such as examination papers or results.

USB Sticks.

Although USB sticks are extremely handy for exchanging data between computers they have become one of the main ways that viruses and malware are propagated across the campus. Be extremely careful before accepting a memory stick from someone and always scan it before attempting to read any data from it.

ITD Access to Your PC

No implicit access to a staff computer is possible from ITD or elsewhere. If a staff member requires ITD to diagnose or fix problems on their PC it is expected that a staff member would grant ITD staff explicit access. ITD staff accessing a staff member's PC will abide by defined guidelines.

Approved by IT Steering Committee - 28th May 2002

Further Information:

Backing Up Windows XP

How to Change your UL Network Password

AntiVirus Live Update Setup

Access to an Individual's computer by ITD staff

Backing up (Window 2000)

Symantec AntiVirus - Removing the 1 p.m. Administrator Scan