<div dir="ltr"><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">As others said, We also have an "intermediate" computer that sits between our lab computers and the campus network.</div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">In our case it's a Debian Linux server running the firewall etc. So this takes some active mangement, but has given us a lot of granular control over how our network operates and how users can get their files.</div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">It allows us to have some computers with full internet access, while tool computers only have internal network access, and all computers can access our Process Wiki regardless (for tool instructions etc.) & the Equipment Signup site. We can also allow Vendors to remote-access as needed, for a short amount of time.</div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small"><br></div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">Our lab computers, including old Win3.1, WinXP etc. run an hourly script that syncs ("rsync") new files to the Linux server. </div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">Users can then SFTP into the Linux server and get their files. It has some scripts that set up SFTP access for each group, restricted to their own folders on each tool only.</div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">This does require someone to have some Linux experience, and we still employ a consultant for very difficult cases.<br></div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small"><br></div><div class="gmail_default" style="font-family:times new roman,serif;font-size:small">In the lab, we disable the Windows Driver for the "USB Mass Storage" to prevent users from using the USB ports. Even for computers that don't have restricted user accounts, this still prevents users from using the USB drives.</div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div style="font-family:times new roman,serif;font-size:small">-- Demis</div><div style="font-family:times new roman,serif;font-size:small"><br></div><div style="font-family:times new roman,serif;font-size:small">----------------------------------------</div><div style="font-family:times new roman,serif;font-size:small"> <a href="mailto:demis@ucsb.edu" target="_blank"><font color="#1155cc">demis@ucsb.edu</font></a></div><div style="font-family:times new roman,serif;font-size:small"><div style="font-family:times new roman,serif;font-size:small"><i> Process Scientist Manager</i></div></div><div style="font-family:times new roman,serif;font-size:small"> <a href="https://www.nanotech.ucsb.edu/" target="_blank"><font color="#1155cc">UCSB Nanofabrication Facility</font></a></div><div style="font-family:times new roman,serif;font-size:small"><div style="font-family:times new roman,serif;font-size:small">----------------------------------------</div></div><div style="font-family:times new roman,serif;font-size:small"><br></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr">On Tue, Sep 11, 2018 at 3:45 AM Robbins, Roger <<a href="mailto:Roger.Robbins@utdallas.edu" target="_blank">Roger.Robbins@utdallas.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div class="m_-3537904103635937994m_2116183502146623714WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">RE: “Getting Files off older computers”<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">The cleanroom at the University of Texas at Dallas has solved that problem by purchasing a new computer with a large capacity hard drive and attaching it to a
network associated with the old computers. The usage protocol allows the tool computer a two way link to read and write files. So the user of the tool stores data to this hard drive and then links a desk top etc. computer to the large storage computer and
downloads the data. However the desktop computer cannot upload anything to the storage disk. This allows access to the data but prevents viruses from infecting the cleanroom tools.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Cheers,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Dr. Roger Robbins<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">UTD Process Engineer<u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Keith Bradshaw <<a href="mailto:bradshaw1234@gmail.com" target="_blank">bradshaw1234@gmail.com</a>>
<br>
<b>Sent:</b> Monday, September 10, 2018 6:34 PM<br>
<b>To:</b> scott riekena <<a href="mailto:rsriekena@yahoo.com" target="_blank">rsriekena@yahoo.com</a>>; Goodnight, John <<a href="mailto:jgood@utdallas.edu" target="_blank">jgood@utdallas.edu</a>>; Robbins, Roger <<a href="mailto:Roger.Robbins@utdallas.edu" target="_blank">Roger.Robbins@utdallas.edu</a>>; Pollack, Gordon <<a href="mailto:gordon.pollack@utdallas.edu" target="_blank">gordon.pollack@utdallas.edu</a>><br>
<b>Subject:</b> Fwd: [labnetwork] Getting files off older computers<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">---------- Forwarded message ---------<br>
From: <b>Kevin McPeak</b> <<a href="mailto:kmcpeak@lsu.edu" target="_blank">kmcpeak@lsu.edu</a>><br>
Date: Mon, Sep 10, 2018 at 6:52 AM<br>
Subject: [labnetwork] Getting files off older computers<br>
To: <<a href="mailto:labnetwork@mtl.mit.edu" target="_blank">labnetwork@mtl.mit.edu</a>><u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Dear Colleagues,<br>
<br>
Here at the LSU cleanroom, we have several older computers (e.g Win XP and Win 7) which are not allowed on the network. These computers are connected to instruments <span style="font-family:"Arial",sans-serif">(e.g. SEM and AFM)</span> that we often need to
get files from. Unfortunately, the instruments do not run on Win 10 (our network administrator won't allow Win 7 on the network as well). <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The current protocol to get images etc. off these older computers is to use a cleanroom owned USB stick to move the file to one computer in the cleanroom which is on the network.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I do not like this protocol. It is very difficult to stop users from using their own USB stick, which could be infected. Also USB sticks grow legs.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I suspect other facilities on the list have faced these same challenges. I am curious how you have resolved them. Thank you in advance for your input!<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Regards,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Kevin<br>
<br>
-- <br>
Kevin M. McPeak<br>
Assistant Professor<br>
Louisiana State University<br>
Dept. of Chemical Engineering<br>
3307 Patrick Taylor Hall<br>
Baton Rouge, LA 70803<br>
email: <a href="mailto:kmcpeak@lsu.edu" target="_blank">kmcpeak@lsu.edu</a><br>
phone: 225-578-0058<u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
labnetwork mailing list<br>
<a href="mailto:labnetwork@mtl.mit.edu" target="_blank">labnetwork@mtl.mit.edu</a><br>
<a href="https://mtl.mit.edu/mailman/listinfo.cgi/labnetwork" target="_blank">https://mtl.mit.edu/mailman/listinfo.cgi/labnetwork</a><u></u><u></u></p>
</div>
</div>
</div>
</div>
_______________________________________________<br>
labnetwork mailing list<br>
<a href="mailto:labnetwork@mtl.mit.edu" target="_blank">labnetwork@mtl.mit.edu</a><br>
<a href="https://mtl.mit.edu/mailman/listinfo.cgi/labnetwork" rel="noreferrer" target="_blank">https://mtl.mit.edu/mailman/listinfo.cgi/labnetwork</a><br>
</blockquote></div>