Devices owned by Michigan Tech are categorized (by Michigan Tech IT) as either fully managed or minimally managed. Most devices fall into the category of fully managed, which is the typical setup for office desktops. They connect to the Michigan Tech central authentication system and are automatically configured to access Michigan Tech resources for a seamless experience.
Mobile devices, like laptops, or systems that require customer administrative access to manage a device (such as a microscope/other hardware or that have a justified security need to maintain administrative access to a device) are categorized as minimally managed. They connect to a cloud authentication system managed by Michigan Tech. These devices need to be manually configured by the customer and will need additional steps to access Michigan Tech resources.
Michigan Tech IT has previously referred to devices as either on-domain or off-domain. On-domain devices are now referred to as fully managed. Off-domain devices will be rebuilt as minimally managed devices. The off-domain set up is similar to minimally managed devices, as manual configuration and additional steps are needed to connect to Michigan Tech resources, but with a few differences.
Fully managed
Accounts and permissions
Log in with your Michigan Tech account. Remote access to office or private lab computers is available for faculty and staff from off-campus with the use of the VPN client. Remote screen sharing will prompt the customer for approval. Administrative access is restricted to Information Technology professionals.
Access to H: home and M: multidrive
Access the M: multidrive and H: home drive without the need to use the VPN.
Saving and backing up files
Save files and your account profile to the H: home or M: multidrive, where backups are taken on a frequent basis. This allows you to be able to restore recently-saved files on the M: multidrive or H: home drive yourself.
Printing
Add Michigan Tech campus networked printers without needing to install and run the Papercut Client.
Software
Install selected Michigan Tech software through a campus software library without the need for administrative privileges and access the campus license servers without the need to use the VPN. Contact IT for additional software requests.
Updates and security
Michigan Tech IT will automatically update the operating system, firmware, and selected software during the weekly maintenance window (Thursdays 2:00 a.m. - 6:00 a.m. EST). Please log off of your device each Wednesday evening, and keep the device on and connected to the network.
Michigan Tech IT automatically configures security settings to apply standard workstation security, such as the system firewall, logging, encryption, screen locking, and remote management/assistance for IT staff.
Minimally managed
Accounts and permissions
- You will need to connect to the Internet before you log in for the first time. Connect to wireless on-campus or to another network.
- Log in with your Michigan Tech email address (accountname@mtu.edu).
- The device will then cache, or remember, your credentials for use in areas with low or no network connectivity.
In certain situations, administrative access is allowed for the customer to perform system management and upkeep, as long as the device maintains a regular connection with the IT device management system (Azure, JAMF, or Satellite).
Access to H: home and M: multidrive
You will need to manually configure the connection to your H: home or M: multidrive, as well as use the VPN.
Saving and backing up files
You can save your files and account profile locally on the device. However, files saved on the device are not backed up by IT. For that reason, we strongly encourage you to store important files in a network location, such as your H: home or M: multidrive, where backups are taken on a frequent basis. You can also use Google Drive for Desktop or an external hard drive.
Printing
Installing and running the Papercut Client is required to print to campus networked printers. You will need to manually install drivers and printers.
Software
You can access selected Michigan Tech software, beyond what is already included in the Campus Common CORE software, through the available campus software libraries. Contact IT for additional software requests.
- Windows: AppsAnywhere is available in the Azure Company Portal. Please visit AppsAnywhere Overview for more information.
- Mac: Tech Apps campus software library (Mac) and Software Distribution Center
- Linux: Software campus software library (Red Hat Linux 7) and Software Distribution Center
Updates and security
Michigan Tech IT applies basic system security and configuration settings and configures the system to perform regular operating system and security patches. When possible, local drives are encrypted. Michigan Tech IT manages the encryption keys.
Michigan Tech IT monitors compliance for updates and security through IT management systems. Devices identified as being behind on patches will be locked from access and removed from the network until they can be updated and in compliance.
Historical information for off-domain devices
Accounts and permissions
Log in with a local account on the device. The device is not connected to the Michigan Tech central authentication systems. The device owner has administrative rights.
Updates and security
You need to apply regular updates to the device, as the device will not be regularly updated by IT. This means security and stability updates need to be applied by the owner of the device on a routine basis.
Other items
Set up and configuration for access to H: home and M: multidrive, saving and backing up files, printing, and software is similar to minimally managed.