VMware

This Question is Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
4 Replies Last post: Dec 2, 2008 2:12 PM by khughes  

Faking out IT (and getting full use of my 64-bit 4GB laptop) posted: Dec 2, 2008 12:45 PM

Click to view Darth8878's profile Lurker 2 posts since
Aug 20, 2008

I have what may be a unique situation (or not) - our IT Director has locked down access to the native laptop and forces all developers to use only VMs as their development machine/environment. The project I'm on needs to produce code that runs on both 32-bit and 64-bit platforms. The VM environments are 32-bit only. My team has access to (extra) licensed copies of Vista 32-bit and 64-bit. The laptop has both hard-wired and WiFi NICs. This renders out main laptop essentially useless and thus, the only thing it would be used for is email, browsing and Microsoft Office 2007.

We use VMWare Workstation 6.5. We want to:

1. Turn the current physical machine (and IT-installed software) into a (32-bit) VM such that it (the VM) uses the Ethernet NIC as it's NIC and the VM is still a member of the corporate domain and thus looks, to the admin's system management tools, just like the original laptop. Then the sysadmin's automated sign-on scripts, etc., would still run and the sysadmin'sforced updates/installs would still occur, only to the VM and not to the physical laptop.

2. Put Vista 64-bit on the laptop and set it up any way we desire, and install the complement of Microsoft's 32 and 64-bit tools. Configure the Vista 64-bit laptopto only use the WiFi network connection (thus making it not directly accessible to IT since it would be on the "outside" network which is always available for visitors).

The theory is that the 64-bit Vista would make the entire 4GB of physical RAM available for us to use as desired/necessary (e.g. running a scaled-down VM which looks like the corporate laptop plus a couple other VMs in server mode to simulate our server-side environment).

Comments? Suggestions?

Click to view vmroyale's profile Champion vExpert 2,238 posts since
Jun 15, 2007
Hello and welcome to the forums.

While what you are saying is technically sound and is also a creative way to solve a problem, it sounds like a bad idea to me. If your director has policies in place to lock down the laptops to begin with, what will happen if (and when) he or she discovers this "solution" you have come up with? I'm guessing it won't be a favorable outcome for you.

There are also possible security implications for running your primary workstation with development code on an "outside" network which is always available for visitors.

Sounds like a fair amount of risk, but I tend to be cautious. Is presenting a solid business case to the director for using a 64-bit OS an option? It might get you better long-term results.

Good Luck!
Click to view khughes's profile Virtuoso vExpert 1,575 posts since
Jan 8, 2008

I tend to agree with vmroyale on this one. What you're doing, depending on where you work and what information you touch, could have sever penalities if the IT Director ever finds out what you actually did to Company property. I would assume if you have any sort of regulations over your company that the penality could be upwards to termination. What you're talking about would essentially work, the risks outweigh the rewards. What you should do is plan out a proposal to talk to your boss or IT director listing out what you need in order to do your job, which would include using a 64-bit OS which can't be replicated inside a VM.

Another factor is these laptops that are being handed out, are they using OEM licensing? If you're looking to p2v them in order to bypass security and you're running an OEM license you'll null and void your license right there and you'll be screwed and I'm sure trying to explain why/how you voided the license to your IT Director wouldn't be the most plesant thing to do. Also I don't know about your company but we require our users to bring in their laptops for routine check ups, what happens when they want to look at your laptop? You format it instantly? Dont you think that would be a little obvious....

Obviously you know what you need and what you have to work with, and someone higher up doesn't understand you don't have all the tools to do what you are required to do for the company. If it was any good reasonable director, they would see that some changes would need to be put in place so you can properly do your job, under approved standards. No one here is going to say they haven't used vmware to do some questionable things but remember you're walking on thin thin ice.

  • Kyle
Click to view khughes's profile Virtuoso vExpert 1,575 posts since
Jan 8, 2008

Darth8878 wrote:

As to all your helpful suggestions, yes, I/we have done that and even have forwarded numerous technical articles to prove our point(s). Dead silence from the other side; hence, my hypothetical.


Save those emails and when you can't do your job and they come down on you then you have at least some proof that you tried to get authorization to do your job and couldn't due to someone higher not giving you the tools to do so.

Btw welcome to the boards and good luck.

  • Kyle

VMware Beta Programs

Want to be Considered for Future Beta Programs?

Learn More

VMware Developer

Download SDKs, APIs, videos,
training, and more in the Developer community.

Learn More

Developer
Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld
Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

Only VMware ... Delivers Nexus 1000V

Ensure consistent, policy-based network capabilities to virtual machines across your data center.

Learn More

Communities