Category Archives: Uncategorized

On December 29^th Baruch changed Zoom authentication from the Baruch username and password to using the CUNY Login to access Zoom.  We are working through some user issues and would like to make the following recommendations to faculty

• The “Baruch.zoom.us” option for SSO no longer works—users must use “cuny.zoom.us” as the SSO option to log in, and authentication will redirect to the CUNY Web Applications Login screen which takes your CUNY login id ([email protected]) and your CUNY Login password.
  

• When adding alternative hosts, or preloading breakout rooms in Zoom, you must now use a student’s CUNY Login ID since Zoom now knows the user as their CUNY Login and not their @baruch.cuny.edu or @baruchmail.cuny.edu email address. CUNY Login IDs are available on CUNYfirst course rosters but will need the @login.cuny.edu appended to them (this spreadsheet might help).
• The “CUNY Users” option for authenticated users only was not working correctly until recently.  It now should allow any account that ends with “cuny.edu” to connect to a meeting restricted with that option.  If you have changed your authentication options you may need to reset them to the account defaults to see this change.
  

• You will also need to remove and reset authentication options for meetings set with the old option.  You should see “*.cuny.edu” as the domain restriction for the “CUNY Users” setting.
  

• Please note that the “Baruch Users Only” option will NOT work for any student in your classes who has a primary affiliation with another school.  Their username will be in another CUNY colleges’ Zoom account.  We strongly recommend against using “Baruch Users Only” to protect classes and to use “CUNY Users” to ensure all CUNY students can get to the class.
• Most student login issues are due to using “Baruch.zoom.us” instead of “cuny.zoom.us” for SSO.  However, students who have transferred to Baruch from another CUNY school may receive a message that they need to verify their account by checking an email sent to their @login.cuny.edu address.  In most cases this goes to their preferred email in CUNYfirst, which may be their Baruchmail account, another CUNY email account, or a personal account.  They need to verify their preferred email address setting and look for that verification message there.  This is because their user ID must be moved from their old school to Baruch and verification is needed.  If for some reason they have not received that email to any of their accounts in CUNYfirst they should open a ticket with the Helpdesk who will coordinate with CUNY CIS to resolve the issue.
• If there are issues with users being unable to access meetings due to authentication issues you can disable the “Require authentication to join” (or “Only authenticated users can join”) option for meetings until the user issues are resolved.  As always, all meetings should be authenticated with a passcode and/or waiting room.
• There are four CUNY colleges not using CUNY Login for Zoom:  BMCC, John Jay, Hostos, and City College.  Using CUNY Login to access Zoom will not work at all for students whose primary affiliation is at those schools.  We are instructed to have them use the Zoom account provided by their primary institution.  This should work even for classes requiring authentication if the “CUNY Users” option above is used.
• We’ve had several faculty report challenges with having both the “Require authenticated users to join” and “CUNY Users” selected, and the meeting requires registration, as the registration page behaves a little differently than most people expect. The registration will only allow the address of a valid Zoom account to register. For Baruch users now this is the @login.cuny.edu address of the user, not their email address. It will not work for a cuny.edu email address that is not affiliated with a Zoom account (so your email address at @baruch.cuny.edu or @baruchmail.cuny.edu will not work for registration).

The Helpdesk is trying to resolve problems as quickly as possible with student authentication issues, including working with CIS to resolve issues beyond Baruch’s control. Following the guidance above should help reduce issues the BCTC Helpdesk has to deal with moving forward.

The transition to CUNY Login was successful on December 29th, and most users are able to log in without incident. As we were unable to fully test this implementation before Zoom made the change for us, there are a few issues we have since discovered, some that we are working on developing workarounds for, and some will require some additional support.

First, it is now important that you use cuny.zoom.us for SSO login, not baruch.zoom.us. While we initially thought the baruch.zoom.us would redirect to the CUNY login, that is not currently the case. (We are working with Zoom to determine if it can be done or not at this time, although we had expected it to work before.) This issue seems to resolve most of the Helpdesk requests we are currently receiving.

Another detail we are seeing is that the “Baruch Users Only” option for meeting security may not be working correctly at this time. We have updated the default behavior to be so that it now includes all users in the Baruch account, but in some cases it may be that authentication is limited to users whose Zoom login IDs contain baruch.cuny.edu or baruchmail.cuny.edu–and the user IDs no longer contain those domains, they are all login.cuny.edu. If you’re finding issues for meeting security, try changing this and changing it back. It looks like the change may be propagating across all meetings now, but we will work with Zoom to confirm.

However, if you have students (or faculty/staff) who are affiliated with multiple CUNY institutions, you may find they will not be able to log in with “Baruch Users Only” set since their account is in another colleges’ account. In that case there is a new option for “CUNY Users Only” which allows anyone with a cuny.edu domain in their email address to log in, which should handle anyone at CUNY properly.

Users who have multiple affiliations may find they are logging into an account for a different CUNY institution now. In most cases the Baruch account is still there and we may be able to transfer meeting recordings and future meetings to your CUNY account, we are still investigating the best way to do that.

There is a small number of users for whom their Baruch account was renamed but their affiliation is not Baruch, and that is causing a login error. We have to work with CUNY CIS to resolve these issues on a case-by-case basis and will be opening tickets to get this resolved ASAP.

If you have any other issues with Zoom authentication please reach out to the BCTC Helpdesk.

UPDATE: January 3rd: Please go here for the latest summary of what has changed.

UPDATE, December 30th: Zoom logins have now been changed for most users to CUNY Login. You must now use cuny.zoom.us as the SSO login address as the baruch.zoom.us is not currently working. There may be some accounts that did not migrate correctly; please contact the BCTC Helpdesk and we will troubleshoot.

NOTE: The timing of the Zoom change is now after 4pm on Wednesday, December 29th, 2021.

We have been working behind the scenes and are now ready to implement the change of Zoom authentication to CUNY Login as of December 29th, 2021. This date was chosen as the least disruptive time–after fall semester is complete, but before January and Spring sessions begin.

The change will mean that instead of using your Baruch username and password to access Zoom you will use your CUNY Login like you do for CUNYfirst, Blackboard, and other CUNY-provided services.

The change will be a migration of your account from your Baruch username and email address to the CUNY Login. This means that all account settings, meetings, recordings, etc, will still be associated with your account. We have been told by Zoom that meetings will be accessible both at cuny.zoom.us and baruch.zoom.us once the change is completed.

We cannot predict every change that will happen but we are expecting not much to change other than the method you use to log in to Zoom.

At this point we are planning to have Zoom be unavailable from 4pm on Wednesday, December 29th through noon on Thursday, December 30th. During this time you will not be able to use your Baruch or CUNY Zoom account to run or attend meetings. We are still finalizing the exact schedule with CUNY and Zoom but we don’t expect for this to take longer than the allotted time. It is possible that the entire migration will be finished on the evening on the 29th but we’re requesting people don’t anticipate being able to log in to Zoom until the afternoon of December 30th.

While we have mapped current Baruch usernames/emails to CUNY Logins for nearly every user, there are some situations where things will behave differently. One is for students, faculty or staff with a primary affiliation other than Baruch Collge. There can only be one CUNY Login for those users and so it’s possible that your CUNY Login account will be affiliated with another CUNY college. If you were already using your CUNY Login to access that other school’s Zoom configuration that will not change but you will no longer have a separate login for Baruch. In most cases this will actually simplify Zoom usage.

Another thing that will change is the use of “Baruch users only” for Zoom security. Since the accounts will all be @login.cuny.edu instead of @baruch.cuny.edu or @baruchmail.cuny.edu, limiting to Baruch users will not work the same way it did before. However, limiting to CUNY users will provide similar security (and will work better for users without a primary affiliation of Baruch). We are still considering the impact of the change on login security and will be able to provide fully updated instructions once the change is completed. Watch this space.

We also understand that configuration of alternative hosts should still work and in fact the usernames specified will migrate to the CUNY Login usernames.

One final consideration for the migration are Zoom accounts associated with resource accounts for departments. These accounts will need to have CUNY Logins created for the migration. CUNY has outlined a process for us to follow to configure those accounts. We will be compiling a list of resource accounts in Zoom and working with CUNY to enable those CUNY Login accounts before the migration so they are successful.

If after December 30th you have troubles logging into Zoom or do not see what you expect, you can contact the BCTC Helpdesk who will be able to troubleshoot the issue and determine what needs to be done.

Here are the slides for the new faculty orientation.

To maintain and enhance enterprise security of all BCTC services, we now require VPN access to use HRAssist if you are not accessing the service from an on-campus computer.

Many full-time employees are already using the VPN to access their office desktop computers or other Baruch/CUNY services, especially during the work-from-home policy during the pandemic. The VPN can be used to access any internal Baruch service not accessible to the open internet, and you do not need to remote desktop to your computer to use HRAssist (although it will work fine from there.) Not only can you just connect to the VPN on your home computer and access HRAssist directly from that computer, you can also download the GlobalProtect client for iOS/iPadOS and Android and access the service from your smartphone or tablet.

We have updated the instructions available at https://baruch.cuny.edu/vpn to provide basic instructions for connecting with the mobile clients. Also note that since the start of the pandemic VPN access has been automatically enabled for all faculty and staff and no longer needs advance approval from your supervisor, and although we don’t require you fill out the VPN form in advance, we ask that you follow the guidance it has regarding keeping the vendor OS patches up do date, and installing and updating antivirus software (CUNY users can download McAfee from the offers.cuny.edu website.)

CUNYfirst will be unavailable from 8pm on Wednesday, March 24 until noon, Sunday, March 28th. This downtime is necessary because CUNY’s Office of Computing and Information Services (CIS) is moving the CUNYfirst application from the current hosting provider to servers located in the CUNY data center.

CIS has been preparing for this event for more than a year, and has been engaging in extensive testing and running the new servers for several months in parallel with the hosted environment. Some common questions about the migrations and answers are below:

• Why were the dates selected? CUNY selected these dates to have the least impact possible on University business processes. The dates are before fall enrollment and FY21 procurement deadlines. They also align with the start of Spring Recess.
• What exactly is happening? Right now CUNYfirst is run by a third-party hosting company on remote equipment. CUNY CIS is moving the application to servers located in the CUNY data center. This is primarily because the contract with the provider has ended and CUNY has chosen not to renew it. It will also allow CIS to have more flexibility in future upgrades and improve long-term planning.
• Will I see any difference? Users are not expected to see any changes in the CUNYfirst environment. All addresses to get to CUNYfirst services will remain unchanged; and the software, applications, and data will all be unchanged from before the migration. Please note CIS is also freezing system changes in CUNYfirst for 20 days before and 20 days after the migration, which means CIS will be deferring any software patches or feature enhancements to CUNYfirst during this time.
• What do I need to know? All access to CUNYfirst will be unavailable during the upgrade window. Students, faculty and staff should expect to not be able to enter any data into CUNYfirst or look up information in CUNYfirst during this time. Note that CUNYfirst will be unavailable, but all other services using CUNY Login will continue to work normally (Blackboard, DegreeWorks, etc.) However, services that receive CUNYfirst data will not receive that data during the migration.
• What about Baruch services? Services that depend on CUNYfirst data will not receive updates. This mostly affects account provisioning for faculty and staff, and any processes which receive data from the 805 and 856 files. Since the migration is not occurring during an enrollment or add/drop period data changes are minimal during this time.
• How should I prepare? If you work in an office that regularly enters data into CUNYfirst, plan for not being able to add data during the workdays of Thursday, March 25th and Friday, March 26th. You may wish to focus on other activities to support the office during this time. While you may be able to download certain data from CUNYfirst in advance, remember that data containing confidential information as per the CUNY Data Security Policy should remain on Baruch computers (i.e., access your office computer via VPN to work with that data.) If you are a student or faculty member, understand you will not be able to look up course information or rosters in CUNYfirst or otherwise change any personal information during that time.
• What should I do if I have questions? Information about the migration may be available from the CUNY IT Help website. We will also update our webpage with information as CIS makes it available. If you need additional help, please consult the BCTC Helpdesk.

CUNY CIS and BCTC appreciate your patience during this process, and look forward to continuing to serve your CUNYfirst needs after the migration.

BCTC will be installing new campus firewalls from 7-9am on Saturday, January 16^th, 2021.  These firewalls replace equipment that is nearing end of life and will support higher performance. There will be brief interruptions to the campus internet connections during this time.  In addition, all VPN connections that are active at that time will be disconnected and will need to be reestablished. Please monitor BCTC social media (bctcbaruch on Twitter and Facebook) for status updates at that time.  If you have trouble connecting to services after this service window, please contact the Helpdesk at [email protected]. 

Background

The current campus firewalls are over 6 years old and are nearing the end of support by the vendor. In addition they do not support the latest versions of the firewall software available from the vendor which offers more advanced security features and up-to-date configuration options. CUNY initiated a project late last year to procure new firewalls for all the CUNY campuses. We began the migration plan by reviewing the existing firewall configurations and removing outdated rules and other ineffeciencies. We received the new firewalls from CUNY back in December and since then have been migrating the configuration from the existing firewalls to the new ones, and have validated the configuration.

The old firewalls are in a redundant pair that supports full failover and backup if a connection is disrupted or a problem causes a firewall to crash (which is incredibly rare). The new firewalls will also be in the same redundant configuration. On Saturday morning we will disconnect the redundant pair, and then physically move the network connections from one of the old firewalls to the new firewall. At that point we will test connectivity on- and off-campus to a defined list of services that will indicate that the connection is operating normally. Since the configurations are identical and we’re plugging the new system into the same ports as the old system, we expect less than a few minutes of disruption while the firewalls configure for the network. If that does not happen we will troubleshoot the connection, with the worst case scenario being that we switch back to the old firewall and regroup. If as expected the new firewall works correctly, we will then connect the second new firewall to the network and reestablish the high availability connection between them to preserve redundancy. The only actual disruption of service occurs when we move the physical fiber optic cables from the old firewall to the new firewall, and then the new firewall becoming known to the existing network, a process we expect to only take a few seconds but in no case should take more than 5 minutes.

As we plan for other future network upgrades in anticipation of being able to support in-person and hybrid learning in Fall of 2021, the new network switches being installed will support higher-speed connections between campus buildings and the CUNY ring connecting to the Internet. The new firewalls have high speed interfaces that will allow us to fully benefit from the connections to the new network equipment. For now we are using the connections for our existing network.

1. In the Blackboard course, go to the Grade Center (in the lower left Course Management/Control Panel area)
2. In the exam column’s header cell, click the down arrow:
3. In the pop-up menu, select “Edit Column Information”

4. Scroll down and select “No” for the “Show this column to students”

Note that the instructions say: “Select No for the second option to hide this column from students in My Grades” which prevents the student from viewing the exam grade even if the test is automatically graded.

5. Click “Submit”

=========================================================

To display the grades later, the instructor only needs to choose “Yes” instead of “No” for the option “Show this column to students” and this will reveal the exam score to each student.

=========================================================

NOTE: the steps above hide the overall exam grade.  To ensure that students do not see their scores on individual questions of the exam, make sure you have selected the appropriate settings in the “Show Test Results and Feedback to Students” section of the “Test Options” for your exam.  The most straightforward way to hide question scores and other information is to make sure that none of the checkboxes is selected in this section:

If you would like to show students some of the information in the “Show Test Results and Feedback to Students” section, please refer to this PDF guide (10 pages):

https://www.baruch.cuny.edu/bctc/intech/documents/ConfiguringTestResultsandFeedbacktoStudentsonBlackboard.pdf

CUNY has procured a site license for Camtasia and Snagit for faculty use. Please reach out to your tech coordinator or email the Helpdesk for the license key and installation instructions. You can get support for the products at the TechSmith help center.

The University’s free student, faculty, and staff access to Adobe Creative Cloud ends on October 30, 2020.  

After October 30, the following Adobe Creative Cloud licensing will be in effect at Baruch: 

For students: 

Students who are enrolled in courses that require Adobe Creative Cloud use can continue to use the software without interruption.  If your course has been identified as requiring Adobe Creative Cloud, your entitlement through your CUNY Login will continue to work after October 30. 

 All other students can access Adobe Creative Cloud from the Baruch online labs located at https://onlinelabs.baruch.cuny.edu/. The online labs can be accessed using your Baruch username and password.  
 
Creative Cloud entitlements for students will be revised on a per-semester basis. 

For faculty and staff:  

Faculty and staff currently who previously received an Adobe Creative Cloud account authenticated by your Baruch email and Baruch username can continue to use the software without interruption. 

If you are faculty or staff and need access to Adobe Creative Cloud you should contact the BCTC Helpdesk for further information.