Chapter Scenario: Wide World Importers

This chapter will apply decision matrices to Wide World Importers, a North American corporation with distribution centers and service centers across the continent. You will be designing security for the deployment of five software applications: Adobe Acrobat Reader, Microsoft Office, WinZip, Adobe Photoshop, and QuarkXPress. Due to misconceptions about how EFS works, Wide World Importers wants to disable EFS within the wideworldimporters.tld domain.

Planning Security for Software Deployment

Wide World Importers is rolling out new software packages at various locations on its network. The Information Technology (IT) department wants to ensure that security is designed for the installation folders so that only required users can install the software and that only authorized users can modify the installation points.

Storage Locations

Wide World Importers has defined the following directory structures for the storage of the software applications. In Washington the following directory structure shown in Figure 6.1 has been defined for the installation points for Adobe Acrobat Reader, Microsoft Office, and WinZip.

Figure 6.1 Washington applications directory hierarchy

In Dallas, the directory shown in Figure 6.2 has been defined for the installation of Adobe Photoshop and QuarkXPress.

Figure 6.2 Dallas applications directory hierarchy

In addition to storing the application installation points, each application also has a folder used to store common graphics (in the case of Photoshop) and templates (for QuarkXPress). These folders require some users to have elevated privileges to allow them to create, modify, and delete template and graphic files.

Software Requirements

Wide World Importers wants to deploy the following software packages, and you've been asked to design security for the applications:

  • Administrators of the network must be able to manage permissions and apply patches to the software distribution points at all offices.
  • Office 2000 will be installed on all corporate desktops. All users must have access to the centralized distribution point so they can run the installation program.
  • All staff must be able to install commonly used utilities. These utilities include WinZip and Adobe Acrobat Reader.
  • The Graphics department in Dallas uses Adobe Photoshop and QuarkXPress to create marketing flyers. Only members of the Graphics department should be able to install the software packages from the distribution point in Dallas.
  • Two users in the Graphics department (Lisa Jacobson and David Jaffe) are responsible for maintaining the default graphics stored in the Common Graphics folder. Lisa and David must be able to create new default graphics and to modify existing default graphics. If new designs are introduced, they must also be able to delete the former versions of the graphics.
  • When producing marketing literature, the Graphics department uses templates within QuarkXPress to ensure that all literature has the same look. Stefan Knorr and Linda Kobara are in charge of modifying the templates. The other users in the Graphics department should only be able to read the templates.

Print Security

Wide World Importers recently purchased an Agfa Proset 9800 film printer for the Graphics department. The department uses it to print color separations for magazine layouts. Due to the cost of printing to film, Wide World Importers wants to ensure that only members of the Graphics department can print to the Agfa Proset 9800.

Planning for Protection of Confidential Data

Wide World Importers wants to prevent users from encrypting local data by using EFS. Twice in the last month, a user has rebuilt a computer and was unable to access previously encrypted data.



Microsoft Corporation - MCSE Training Kit (Exam 70-220. Designing Microsoft Windows 2000 Network Security)
MCSE Training Kit (Exam 70-220): Designing Microsoft Windows 2000 Network Security: Designing Microsoft(r) Windows(r) 2000 Network Security (IT-Training Kits)
ISBN: 0735611343
EAN: 2147483647
Year: 2001
Pages: 172

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net