This chapter will apply decision matrices to Wide World Importers, a North American corporation with distribution centers and service centers across the continent. You will be designing security for the deployment of five software applications: Adobe Acrobat Reader, Microsoft Office, WinZip, Adobe Photoshop, and QuarkXPress. Due to misconceptions about how EFS works, Wide World Importers wants to disable EFS within the wideworldimporters.tld domain.
Wide World Importers is rolling out new software packages at various locations on its network. The Information Technology (IT) department wants to ensure that security is designed for the installation folders so that only required users can install the software and that only authorized users can modify the installation points.
Wide World Importers has defined the following directory structures for the storage of the software applications. In Washington the following directory structure shown in Figure 6.1 has been defined for the installation points for Adobe Acrobat Reader, Microsoft Office, and WinZip.
Figure 6.1 Washington applications directory hierarchy
In Dallas, the directory shown in Figure 6.2 has been defined for the installation of Adobe Photoshop and QuarkXPress.
Figure 6.2 Dallas applications directory hierarchy
In addition to storing the application installation points, each application also has a folder used to store common graphics (in the case of Photoshop) and templates (for QuarkXPress). These folders require some users to have elevated privileges to allow them to create, modify, and delete template and graphic files.
Wide World Importers wants to deploy the following software packages, and you've been asked to design security for the applications:
Wide World Importers recently purchased an Agfa Proset 9800 film printer for the Graphics department. The department uses it to print color separations for magazine layouts. Due to the cost of printing to film, Wide World Importers wants to ensure that only members of the Graphics department can print to the Agfa Proset 9800.
Wide World Importers wants to prevent users from encrypting local data by using EFS. Twice in the last month, a user has rebuilt a computer and was unable to access previously encrypted data.