Managed Desktop Initiative Phases

Phase 1
In phase 1, a standard software system "image" will be applied to all Windows desktop computers at UCOP so that they are configured identically and are in compliance with a baseline security standard. Each computer will also become a member of a single Active Directory infrastructure. Use of a single Active Directory allows for centralized management of all Windows computers connecting to UCOP's network, which in turn enables UCOP to achieve a more secure and stable desktop environment.

Immediate Phase 1 Benefits

• Faster reaction time to security breaches
• Faster recovery of afflicted systems
• Monitoring of security levels
• Remote distribution of security patches
• Central asset management
• Central deployment of antivirus and anti-spyware measures

Long-term Phase 1 Benefits

• Reduced cost of security incidents
• Increased automation of routine tasks (e.g., software updates)

Phase 2

The second phase of the project involves migrating all UCOP employees to Microsoft Exchange 2003. This means that the existing e-mail system (Eudora) and Oracle calendar service (formerly Corporate Time) will be replaced by Exchange, which integrates e-mail, calendar, contacts, and directory services into one software application. Exchange also offers the following benefits:

• Server-stored messages, allowing access to new and old messages from anywhere
• Vastly improved remote access via the Microsoft Outlook Web interface
• Single sign-on to the desktop and to e-mail and calendar services (i.e., only one password to remember)
• Integration of UCOP's primary mail system with the Blackberry wireless service
• Support for a wide variety of wireless and "smart phone" devices (e.g., Treo)
• Improved workgroup collaboration using on-line storage folders
• Removal of all e-mail, calendar, and contacts data from the desktop, which sets the stage for implementation of

Phase 3

The third and final phase of the project involves removing all user data from most desktop computers. The typical user's data (folders, files, etc.) will reside on a very large centralized data storage system, rather than the desktop. This storage system automatically will make the data available when the user logs on to any computer on the UCOP network. Users also will be able to access their data through the Internet by using a secure network connection. Centralizing data storage is a critical step to protecting sensitive data and demonstrating to the California state legislature the University's commitment to addressing privacy concerns. For example, moving user data off the desktop will significantly reduce the number of security incidents in which sensitive data is acquired by unauthorized individuals through the theft of equipment, such as laptops. In the absence of such a demonstrable commitment, it is highly likely that additional legislation will be enacted that is burdensome and costly to implement and that will impede the University's ability to conduct its mission.

Return to Homepage