VMWare fusion and security concerns..

[baxter]

We are under pressure to get our intel based Mac boxes up and running with Windows. They don't want to reboot the machines, so BootCamp is out of the picture..

 

Getting a basic windows image up and running in Fusion is not a big deal, but I am more concerned with students downloading (or bringing in on Memory Stick) VMware images of things we would not want running on our network such as BackTrack etc..

 

Anyone else looked into the security implications of VMware/Fusion installs..

[DMcCoy]

I assume the £230 for each full windows license isn't off-putting enough?

 

THIS IS WRONG - See below

 

EDIT: It seems that os x qualifies for windows upgrade under VL licenses and you don't have to stop using the os that was upgraded from (which I believe is usually the case)

Edited January 28, 2008 by DMcCoy

[Ric_]

i would have to agree with dmccoy and save yourself hundreds of pounds by finding mac equivalents for the software you need.

 

another option of course is terminal services

[FN-GM]

I would use bootcamp with parallels. That way they can always boot into windows if need be, plus I have used parallels and its pretty impressive.

 

That's just my preference though

 

Z

[baxter]

Licensing is not an issue, I have had confirmation from Microsoft that we are allowed to install Windows as part of our MS School Agreement.

 

They count the installed OSX as a base license so as long as the machine is covered by the school agreement we can install XP.!

 

The software we need is specific Science and Maths software. Specifically, TI calculator software which will definitely not be supported on the Mac and there is no alternative..

[DMcCoy]

Ah, I didn't think you would have the rather helpful schools agreement, I use it here to run office on our macs.

 

I still don't use windows on them though because it is such a pain to manage. If you want to update and upgrade the machines then there is the difficulty of having to do everything twice. You might be able to lock it down with file permissions but I've not really looked into it.

[DMcCoy]

I've been poking around with my fusion install and I have an answer.

 

What's to stop students with removable drive access from using their own VMs with fusion? Nothing

 

Normal users can even create them on their home folders, although it does warn you it might be a little slow. Fusion is not designed as a multi user application so has no security, os x can't tell the difference between images as they are not executables.

[petectid]

Rather then running Parallels or Fusion could you not use Crossover, this would allow you to run Windows apps without running XP.

[baxter]

CrossOver doesn't support fully our Maths applications such as Autograph, Geometers Sketchpad and the TI stuff...

 

I have advised the teaching staff involved that this has serious security implications, but they just want the software installed!

Edited March 17, 2008 by baxter

[localzuk]

Who is putting this pressure on you? Teachers or the SMT? Have you spoken to your line manager or the head and explained the risks?