We ban older OSes as well, so we don't have to keep test machine around
to make sure all of our new rules work, and keep up with patches for
multiple OSes.  (Also, we require Auto Updates rather than each
individual patch, and that doesn't exist in older OS versions.)

Since Clean Access is already determining the OS, write a really basic
check that will always eval as true (or false) and create your rule and
requirement from there.

For example, my Win98 check is a file existence check.  Check only the
OS box for Win98, then specify if SYSTEM_DRIVE\ exists, then the check
is true.  I'm pretty sure most machines running Windows have a system
drive!

Then the "OS-TooOld" rule says "Win98-check | WinNT-check | WinME-check"
and applies to all OSes.  The requirement says if OS-TooOld is true,
then send them to a page explaining their options for upgrade.

-Anne

--
Anne Bower Pender
Computing Support Analyst, Student Services
Information Technology Services, Davidson College
[log in to unmask]


-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of L Garner
Sent: Tuesday, July 19, 2005 4:01 PM
To: [log in to unmask]
Subject: Ban OS versions

Folks,

We are trying to decide what we're going to do about individuals that
want to bring Windows ME to campus.  We've already said that we do not
support it, but what if they bring it anyway?  Is there a way to tell
Clean Access to not permit certain OS versions on the network.

THANK YOU!!
--
Libby Garner
Library and Information Services
203 Chalmers Library
Kenyon College
[log in to unmask]
740-427-5699