WINDOWS CLIENTS: TUESDAY UPDATES

The following applications will be updated tonight via Ninite:

  • Google Chrome: 43.0.2357.124 –> 43.0.2357.130 (details)
  • Flash (IE and Firefox): 18.0.0.160 –> 18.0.0.194 (details) Includes a critical security fix.
  • Notepad++: 6.7.9.0 –> 6.7.9.2 (details)
  • Skype: 7.5.0.102 –> 7.6.0.103 (details)
  • WinSCP: 5.7.3 –> 5.7.4 (details)

The following Microsoft updates will get applied:

Windows 7

Windows 8.1

Too many to list…17 updates, 60MB total size

No issues to report.

WINDOWS CLIENTS: TUESDAY UPDATES

The following application will be updated tonight via Ninite:

  • Notepad++: 6.7.8.2 –> 6.7.9.0 (details)

Also, something worth mentioning is that Notepad++ has moved their stuff off SourceForge, a trend that other developers are following because SourceForge is injecting crapware into installers. This shouldn’t impact Ninite installs at all but something I thought folks should be aware of…I honestly wouldn’t recommend downloading stuff from SourceForge until they stop with the crapware.

Further reading on this issue (admittedly bias):

https://notepad-plus-plus.org/news/notepad-plus-plus-leaves-sf.html

https://blog.l0cal.com/2015/06/02/what-happened-to-sourceforge/

No Windows updates. (details)

No Office updates. (details)

No issues to report.

Apple Local Items Keychain (The Really Annoying Keychain Issue)

Just a quick reminder about resolving the super-annoying keychain issue on a user’s profile since it has come up a couple of times recently. This is the one where attempting to launch almost any application on OS X (all versions) generates a whole slew of popups asking them to unlock the Local Items keychain. It’s possible to just cancel through all of the windows and you’ll eventually get to whatever app you were trying to open, but it gets really old, really quickly.

You can find Apple’s official page documenting the fix here.

Alternatively, Mr. Dowd has converted it into a Word doc and put it up on sharepoint here.

Yes, I know the fix pages reference OS X Mavericks specifically, but the problem and fix really is the same across multiple versions of OS X.

WINDOWS CLIENTS: TUESDAY UPDATES

The following applications will be updated tonight via Ninite:

  • Google Chrome: 43.0.2357.81 –> 43.0.2357.124 (details)
  • Flash (IE and Firefox): 17.0.0.188 –> 18.0.0.160 (details)
  • PDF Creator: 2.1.1.820 –> 2.1.2.884 (details)
  • Skype: 7.5.0.101 –> 7.5.0.102 (no release notes O.o )

There is about 1GB worth of Windows and Office updates. The WSUS synchronization log can be found here:

\\cn-share\is\TSS\CN\Patch Tuesday\WSUSJune2015.xls

This series of updates does require a reboot.

Issues:

  • PDFCreator nuked my profile settings and is presenting me with a welcome screen to set up my profile again.
  • Office has decided that new shortcuts should be placed in C:\Users\Public\Desktop. As a result, all of my desktop shortcuts for Office got duplicated.

Unified Accounts: Things to Know

As you all hopefully know, the university is working on unifying all Active Directory accounts as a part of the identity management initiative.  Here are a few things you should know in order to support our customers during and after this transition.

Short version:
Look in RefTool to see if an account is unified.
Unified means they have ONE account, in ONID.
Password resets are via the ONID password reset tool.
Directory updates happen via Banner data.

What is Account Unification?

From the customer’s perspective, account unification means they have one set of credentials to login to most university services. They will use the same username and password to login to email, VPN, OSU Online services, etc.

From an IT perspective, a unified account means the following:

  • It is like a traditional “ONID” account:
    • It is automatically created via scripts from Banner data.
    • The customer activates their account when they become a new student or employee.
    • It is synchronized between ONID LDAP, the ONID Active Directory domain, Google, and Office 365 (same username and pass for all of these).
    • Directory information such as name, phone number and office are populated from Banner (and need to be updated there if they are wrong).
    • Password resets are self-service via the ONID password reset tool.
  • An IT unit on campus has claimed the account, and has administrative access to it.
  • The AD account may or may not have an Exchange mailbox attached to it. If it does, the ONID email address will not be listed in the Exchange Global Address List (GAL).

Note: for undergraduate students, account unification doesn’t have any particular meaning, because they typically only had one AD account to begin with (the ONID one).

Is This Account Unified?

In RefTool, you can see whether an account has been unified. Because unification has no impact on undergraduate students, nothing will be listed for them.

So far, the following groups have been unified: Library, Information Services, College of Ag Sciences.

All units should be unified by January 2016.

User Principal Name (UPN)

We are requiring everyone to set their UPN to the new standard as part of the account unification process. People might be confused about how to login after this.

The UPN is another account logon type, in the format oniduser@oregonstate.edu.

The UPN is unique in the AD forest, whereas usernames can be repeated (i.e. you can have forestry\bob and onid\bob and they can be different people, but there is only one bob@oregonstate.edu).

Because the UPN looks like an email address, we decided to make sure that everyone also has an email alias that matches their oniduser@oregonstate.edu UPN. However, that email alias may not be the person’s primary alias, the one they send email from.

For example, my attributes are as follows:

    username: peterkir
    UPN: peterkir@oregonstate.edu
    primary SMTP:kirsten.petersen@oregonstate.edu
    additional SMTP: peterkir@oregonstate.edu
    SIP address: kirsten.petersen@oregonstate.edu

In many places you can login either as domain\user or user@oregonstate.edu.  Office 365 requires you to login with the UPN.

The SIP address is used for Lync, and does not have a standard format yet (unfortunately). Changing the SIP address is a problem – it causes the person to disappear from other people’s contact lists.

 

What is CORE?

CORE is a web-based application that allows OSU employees to access student and financial information for their departments. CORE will eventually replace Data Warehouse, and is a major IS and OSU business intelligence initiative.

More information about CORE: http://fa.oregonstate.edu/budget/core

The CORE site is here: http://core.oregonstate.edu

The site is only available to OSU employees (not students).

Some tips from Diana Lindsley, CORE team manager:

  • Chrome or Firefox are recommended; some features do not work in IE.
  • Mobile devices work, but not all reports are optimized for mobile.
  • Login is with ONID username and password.
  • If a customer can’t see a report and they think they should be able to, have them contact CORE support.
  • Core support can be reached at: core.bic@oregonstate.edu
  • When escalating an issue to the CORE team, please include: username, what report they had problems with, and what the problem was.