Skip to main content

Secure Computing - Purchasing & Feature Guide for Windows

The University of Colorado Boulder has adopted a new set of standards to ensure that all users, computers, and data are secure and protected. This new standard will apply to all University owned machines and data. For more information about the standards and policies please visit the Secure Computing Standard for Computers page on the University of Colorado Policy website.

Purchasing Guide

  • Buy a computer: CU Marketplace is the recommended place to acquire a computer. Faculty are eligible for an FCPP subsidy of $1,200 for a new computer every fourth year. Learn more about FCPP
  • Before setup: Prior to the computer delivery, the computer's primary user should fill out the Office 365 Apps License form (on-campus or VPN connection required). An Office 365 Apps License is necessary for computer setup. Completing this form will either notify that a license already exists for the user or a ticket will be created to assign the license (should take no more than one business day). The user may also contact the IT Service Center at oithelp@colorado.edu or 303-735–4357 to get help with the license assignment.
  • Setup: During the initial setup of your computer, you will be prompted to enter your Identikey username and password. It is recommended that the primary person to use the computer perform the initial login. You may also be asked to confirm your identity using multi-factor authentication (MFA). Visit OIT's MFA page for more information and set up instructions. 
  • Going forward, you will always use your IdentiKey username and password to log into your computer.
  • If using Mac’s Migration Assistant to transfer data from an old Apple computer, only migrate user data and not system data. If you need assistance with this step, we recommend you engage Buff Techs for support.

Feature Overview

The following features will be standard policies and configurations for every Dell Windows device purchased by the University of Colorado Boulder through the Dell portal in the marketplace.

Default Software Installation

The University of Colorado Boulder will automatically install and configure a default set of applications on all University owned Windows Devices. These include:

  • Alertus
  • Cisco AnyConnect VPN
  • Jamf Connect
  • Google Chrome
  • Mozilla Firefox
  • Microsoft Defender
  • Microsoft Office 365
  • Microsoft OneDrive
  • Microsoft Teams
  • Zoom

Self-Service

The University of Colorado Boulder will offer additional software and tools through a self-service application on your Windows device known as Software Center. This will enable you to install additional applications and tools to troubleshoot or fix your device without the direct support of an IT professional. Software can still be installed normally as well by any device administrator.

Software Patching

The University of Colorado Boulder will test and automatically install software updates to any application it has installed on your machine either from the default set of applications or any additional software you have installed from Software Center. This ensures vulnerabilities that unwanted actors may utilize are patched and you and your data are protected.

Operating System Patching

The University of Colorado Boulder will test new operating systems patches and alert users when they are ready to be installed. A tool called Microsoft Configuration Manager will alert users when there is a new update and the deadline to patch your machine by. If a patch has not been applied by the deadline, the system will automatically install the patch and reboot if necessary.

Data Backup

Automatic data backup will be performed by Microsoft OneDrive. During setup of a new device, you will be automatically signed into OneDrive. Once signed in, your computer will automatically sync your Desktop and Documents to your university OneDrive account. If OneDrive has already created you a Desktop and Documents folder, any data in them will automatically sync to your computer. 

University-Authenticated Login

Sign in with your university IdentiKey credentials into Windows. By default, only the person who has enrolled the machine through Autopilot is made a device administrator and can log in. That user can allow other users to log in to the computer as needed.

Disk Encryption

Dell devices purchased by the University of Colorado Boulder will automatically be encrypted with Bitlocker. This will protect you and your data while you are working and will prevent bad actors from accessing sensitive data if your device is ever lost or stolen. If you are ever in need of your Bitlocker Recovery Key, you may reach out to the ITSC or your department IT professional for assistance.

Emergency Support

The University of Colorado Boulder will install tools that provide support and information in the event of an emergency on Campus. The Alertus application will send out alerts for important situations occurring on campus. In addition, Teams will utilize E911 services to help dispatchers provide accurate location information to emergency responders.

Device Setup

Your Windows computer will automatically configure itself to meet the Secure Computing standards with the features outlines above. For a detailed guide to help walk you through the setup process, please visit the Remote Setup Guide for Windows.

If you wish to set up your old computer to meet the Secure Computing Standards you can follow the guide from the Reimaging and Resetting Your Windows Device (PDF).