Acceptable Use Policy (AUP) Basics

• An Acceptable Use Policy (AUP) should be created for discussion and drafting.

General Prohibitions and Exceptions

• Accessing another person's computer files to search, read, copy, alter, or delete is typically not allowed, unless the files are publicly available or the user consents.
• System administrators routinely back up all files on networked and mainframe computers for restoration purposes after system failures.
• System administrators can access files for tasks like running anti-virus software, investigating malfunctions/security breaches, ensuring policy compliance, protecting public safety, or complying with legal warrants, keeping file content confidential unless misconduct is suspected.
• Professors can access files created by supervised students/staff on lab computers.
• Copyright infringing material found on the university website will be copied for evidence, removed, and the poster reported.
• System administrators can delete files of inactive faculty/staff or students.
• Department heads or deans can order the copying and deletion of files posing harm risks, with potential file restoration and apology if deemed harmless by an inquiry.
• Universities can access any file on university-owned computers.

Account Usage

• Using another person's computer account is explicitly forbidden.
• Users should protect their passwords and report suspected unauthorized access.
• Users are responsible for activity occurring under their account.

Password Protection

• Intercepting passwords through any means is prohibited.
• Requesting passwords from others is misconduct.
• When a password is inadvertently discovered, the owner should be notified immediately.

Email and Webpage Content

• Sending emails or posting webpages intended to harm individuals is not allowed, including harassment, threats, defamation, privacy violations, or insults.
• Sending unsolicited emails after a request to stop is prohibited.
• Falsifying authorship of emails or webpages is forbidden.
• Anonymous emails and webpages face scrutiny due to potential misuse.

Email Addresses and Headers

• Forging email addresses or including false information in email headers is prohibited.

Financial and Political Use

• Using the university's website or email for personal financial gain is not allowed.
• Using university computers for personal consulting to for-profit businesses is prohibited.
• Using university resources for partisan political purposes is prohibited.
• Personal opinions can be expressed via email, disclaiming endorsement by the university.

Confidentiality and Bulk Email

• Releasing confidential information or violating contractual agreements is prohibited.
• Sending bulk email is generally forbidden due to resource burden and recipient annoyance.
• Bulk email is allowable for university-related communications within departments or committees, with opt-in requirements for non-university addresses.

Copyright and Trademarks

• Posting copyrighted material without permission is prohibited.
• Users posting infringing material are responsible for legal repercussions.
• Copying pirated software to university computers is forbidden.
• Misusing trademarks in webpages and emails is prohibited, including the university's and others' trademarks.

Network Activity and Malicious Programs

• Probing computer ports without authorization is prohibited.
• Malicious computer programs are forbidden, including their design, storage, and release.

Illegal and Harmful Content

• Sending emails or posting webpages promoting unlawful activities is prohibited.
• Content with instructions for unlawful or outrageously harmful activities is forbidden.

Legal Compliance and Resource Waste

• University computer use must comply with all laws.
• Wasting computer resources, such as infinite loops, denial-of-service attacks, or excessive printing, is forbidden.

Personal Use and Erotic Content

• Personal or recreational activities on computers should not interfere with assigned work or equipment needs.
• Erotic content may be prohibited due to resource strain, hostile environment creation, and incompatibility with the university's mission.

Hate Speech and Authority

• Hate speech faces scrutiny due to First Amendment considerations and inclusivity concerns.
• Professors retain authority over computer policies in their labs.

Housekeeping and General Use

• Food and beverages are prohibited near computer terminals.
• Users should not switch off network-connected hardware.
• Surge suppressors should be used for computers.
• General-use computer restrictions include no hardware changes, software installations, or preference setting changes.

Policy Style and Enforcement

• The AUP should explain the reasons behind rules to promote understanding and ethical behavior.
• Terse rules should be supplemented with detailed explanations and examples.
• Alternatives should be suggested, and exceptions should be allowed by authorized personnel.
• The AUP should address computer-specific issues and general prohibitions.
• Users should acknowledge the AUP in writing upon receiving credentials.
• A decision should be made whether the university will actively monitor usage.
• Reporting procedures and penalties for violations should be established.
• Penalties should be flexible based on circumstances and mitigation attempts.

Common Policy Pitfalls

• Policies should avoid infringing on constitutional rights and citing non-existent laws.
• Policies should avoid bogus legal statements and overly broad regulations.
• Policies should be complete, addressing modern threats, and written to be readable and understandable.

Policy Creation Expertise

• Creating an AUP requires knowledge of computer technology, criminal law, and relevant areas like intellectual property and free speech.
• AUP creation should involve a team of experts, including scientists, engineers, professors, deans, and attorneys.