Texas Block 2.0 Communication

In support of the guidance provided by University Compliance and Risk Services the Endpoint Management Team (EPM) will restrict access to the following apps and services on all EPM enrolled devices on February 27th:  WeChat, WeChat Pay, Alipay, ByteDance Ltd., CamScanner, Kaspersky, QQ Wallet, SHAREit, Tencent Holdings Ltd., VMate, WPS Office, RedNote, DeepSeek (app), Webull, Tiger Broker, Moomoo, Lemon8, as well as any subsidiaries or affiliates of these entities. 

To achieve an enterprise approach to blocking this newly expanded list of restricted technologies, EPM workstations will be required to adopt Microsoft Defender for Endpoints (MDE). EPM will be enforcing the removal of Cisco AMP and then installing MDE on February 25th.  This change will only impact endpoint workstations, servers are out of scope for the adoption of MDE.

Please refer to the EPM wiki for additional information about the implementation of this mandate.  

Texas Block 2.0 Blocking Apps/Services in adherence to Executive Order GA-48  

Removal of Cisco AMP in adherence to Executive Order GA-48  

 If you have questions about these policies or your onboarding status, contact EPM at epm-requests@its.utexas.edu. 

Note: earlier today you should have received the following communication from University Risk and Compliance Services. If you have not seen this message,  check your Spam or Junk folder as it may have been flagged as spam.

----------------

Subject: Notification: Implementation of UTS 200 - Prohibited Technology and Covered Applications 

Dear Faculty and Staff, 

As part of our commitment in keeping the UT Austin community informed, we want to make you aware of a recent development affecting data privacy and security. In response to Governor Abbott’s December 7th 2022 directive, Senate Bill 1893 passed during the 88th Legislative Session, and updated guidance from the Department of Information Resources (DIR) and the Department of Public Safety (DPS), the University of Texas System has issued UTS 200: Prohibited Technology and Covered Applications. This policy is intended to ensure compliance with the new regulations as well as enhance awareness of potential security risks and safeguard sensitive state and university data. 

Key Policy Implementation at UT Austin 

Prohibited Technologies on State-Owned Equipment: All UT institutions must take measures to prevent the use of prohibited technologies on state-owned or leased equipment, and on Thursday February 27, 2025, these technologies will be blocked at UT Austin. 

Prohibited Technologies on Personal Devices Used for University Business: All full- and part-time faculty, staff, contractors, fellows, post-docs, interns and anyone performing business, including research, for the University may not use TikTok and other prohibited technology on personal devices that are also used for university business. Alternatively, users could refrain from using personal devices for university business. “University business” is all UT related work including using the device to access email and other communications platforms used for work, and accessing any UT data or systems whether for business, education or research.    

What Is Prohibited Technology? 

While TikTok is the most well-known example, other prohibited technologies including the following apps, artificial intelligence and social media: WeChat, WeChat Pay, Alipay, ByteDance Ltd., CamScanner, Kaspersky, QQ Wallet, SHAREit, Tencent Holdings Ltd., VMate, WPS Office, RedNote, DeepSeek (app), Webull, Tiger Broker, Moomoo, Lemon8, as well as any subsidiaries or affiliates of these entities. 

For a complete list, please refer to the Texas Department of Information Resources’ Covered Applications and Prohibited Technologies. 

Compliance Reminder: 

If you use personal devices for university business (e.g., work-related emails, texts, video conferencing via Zoom or Teams, or accessing University data): 

• Uninstall any prohibited technology. 

• Or, discontinue using those personal devices for university business. 

Note: The use of Duo for two-factor authentication is permitted and does not constitute using a personal device for state business under this policy.