Power Management and Security
Topics on this page
- Why keep the computers on?
- How does the Nebula security update process work?
- How much does it cost to leave the PCs on?
- Is this the future?
- What should I do?
The computer world changed in 2003, and power management issues are now inextricably linked to security issues:
- There are new tools for a system of centrally managed Windows desktops: the desktop can now regularly query the centralized service systems as to what patches, hot fixes and virus updates it needs, and these can be delivered to the desktop daily.
- Malicious attacks targeted at Windows computers have grown exponentially this year as worms such as Slammer, Blaster, and Sobig have exploited various vulnerabilities in Windows' programs , brought down millions of computers, and caused billions of dollars in damage. At the UW this year, the number of security trouble tickets per month rose from under 500 in January to almost 2,800 in September.
For these reasons, we are requesting that all Nebula PC's remain on, and connected to the network, 24 hours a day, 7 days a week. We also recommend that you log out at the end of your shift. These actions will enable us to keep your computers updated, patched and as secure as we can make them. If you have a laptop, please see our "Laptop Security" page.
Why keep the computers on?
In a managed PC environment such as Nebula, there are many centralized maintenance tasks that must be performed, including software installations and operating system updates. Some environments require additional attention, such as virus scans on Windows workstations. It is desirable to make these maintenance tasks as invisible as possible, so the user can concentrate on getting his or her work done, and not worry about the computer's health.
In a centrally managed environment such as Nebula, leaving computers on 24/7 means updates can be downloaded and installed to the desktop regularly, making use of non-working hours, thus offering a higher level of protection and less disruption for the user. Logins will be faster, since fewer updates have to be done on the spot. Critical software installs are more reliable, since they don't rely on the user's willingness to wait and and not interfere with the process.
How does the Nebula security update process work?
Updates consist of patches and hot fixes for the operating system (Windows XP Professional) and browser (Internet Explorer), and virus definition updates (Network Associates' McAfee VirusScan). It does not include application patches, such as those for Office XP, or other software. You can download these patches at the Microsoft site by selecting them from the available list. Use the directions given in this section of the Keeping Your Laptop Secure page to get you started.
A Nebula desktop (Gold or Bronze) checks both on boot-up and at least once a day to see if there are any available patches and hot fixes, which are then downloaded to the desktop. Once the patches and hot fixes are downloaded, an update balloon appears in the lower right corner. If desired, the user can click this balloon to immediately install the available updates. If not, the updates are automatically installed during the night, when the occasionally mandatory reboot is less of a problem for the user.
Virus definition updates (.dat files) are delivered four times a day to all Nebula desktops. In addition, the login process on a Gold desktop will also trigger an installation of the latest .dat files. Various other updates are also delivered upon login. The user is free to postpone any non-critical updates for up to 3 weeks, at which point they will install regardless.
How much does it cost to leave the PCs on?
Not as expensive as you might think! Recently, the UW Facilities Services department measured the power used by two models of Dell Optiplex computers (GX115 and GX260). Here were the results, using the current City Light electricity rate of 5.5 cents per kilowatt hour:
| PC Model | GX260 | GX115 |
|---|---|---|
| Cost per hour | $.0019 | $.0014 |
| Cost per eve (5p-8a, 15hrs) | $.03 | $.02 |
| Cost per weekend (8aSa-8aM, 48hrs) | $.09 | $.07 |
| Total addtl hrs/yr/PC | $12.15 | $8.95 |
Even the monitors have become very thrifty when in "sleep" mode:
| Monitor model | 17" CRT | 17" flat panel |
|---|---|---|
| 24 hours | $.01 | $.003 |
| Monthly | $.31 | $.11 |
| Annually | $3.77 | $1.33 |
Is this the future?
Probably. Worms and viruses continue to proliferate and become ever more malicious and damaging. The window between when a system's vulnerability is known and when it is exploited is becoming ever narrower. Being able to apply the necessary updates within a short timeframe has become imperative to keep our systems safe and operating. Other University departments, such as UW Medicine, recently sent out email to their users requesting that all UW Medicine PC's be left powered up and on the network at all times, including nights, weekends, holidays and vacations.
What should I do?
At the end of your workday, , or some other time during the day that is convenient for you, please follow these procedures in order to take advantage of the security offered by the Nebula system:
- Save your data and close your applications.
- Use Ctrl-Alt-Del to bring up the Windows Security box.
- Choose Log Off, and confirm.
- If you prefer, you may choose to restart your computer and leave it at the Login screen; this was a good tactic for Windows9x systems, but is less needed for Windows 2000 and XP.
- Leave the PC turned on. You may turn the monitor off if you wish.
