We decided on once a week as well for many of the same reasons.  There
is one school that relates it to a car inspection.  We have stolen that
idea and just told them it is once a week rather than once a month.  I
have se

Thursdays 5:00am - that way we are over 36 hours behind the Microsoft
Patches.  Usually Cisco has the rules written by my update time.  Cisco
says 48 hours but the Clean Access group is so good it is usually
sooner.

Our 2 Help Desk groups said Thursdays were their slower days of the
week.

todd

Todd Joyce
Network Services
Radford University - The Smart Choice
[log in to unmask]
(540) 831-7777
 
Keep your boots and ChapStick and ice hotels.
Give me shorts and sandals and a thirty-blocker.

Temperance Brennan - Monday Mourning
-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Michael Grinnell
Sent: Wednesday, August 30, 2006 10:39 PM
To: [log in to unmask]
Subject: Re: Certified Device Timer settings Poll

Re: Certified Device Timer:
Once a week, Wednesday at 7:00 am.  We started doing this several weeks
after first deploying CCA, in part because it was clear that there were
a lot of desktops that were staying constantly logged in, and were not
being checked as a result.  We chose Wednesday, 7:00 am because it fell
after "Patch Tuesday," because it was neither the beginning of the week
nor the end of the week, because we have fewer classes on Wednesday, and
because 5:00 am - 7:00 am was typically our lowest period of
utilization.  We chose once a week because we felt it was often enough
to ensure that computers remained compliant, and periodic enough that
users would not be unduly burdened.

HTH,

Michael Grinnell
Network Security Administrator
The American University

On Aug 30, 2006, at 6:22 PM, Jamey Heary wrote:

> HI,
>   I would like to hear from those of you that are using the certified 
> device timer what your time interval is set to and why.  I'd 
> especially like to get information from those of you that are using 
> OOB CCA in an IP Telephony environment where the linkdown trap doesn't

> fire.  Any explanations or experiences you have had tweaking this 
> timer would be much appreciated.
>
> thank you,
> Jamey