CDOT held ransom

[Eric P]

Wow. A month? They could really use some automation.

Were the users given least privileged accounts or was everyone a local Admin? Hopefully there weren't any users connected to a network file share with permissions to modify the files.

Not sure exactly what you are asking. But we can not install software without IT connecting to and installing it. Exception is advertised software on the servers.

The virus was pushed to user pcs from the server. Not all systems were affected.

I'm guessing on the time based on how many pcs need cleaning and how long it took to roll out the new pcs.

And yes there are over 2000 computers at CDOT. I think it's approximately 3600 employees.