Active Directory Migration

1
Active Directory Migration

• Drive Mappings
• File System Structure
• Automatic Windows Updates
• File permissions
• Moving a clients PC into AD
• Quotas
• Novell Client
• User/College Admin Roles
• Documentation
• Backups
• Personal Web Sites
• Dept/College sites
• Data Movement
• Rollout Issues
• The SID problem
• Rollout Schedule

2
Drive Mappings

• Based around six basic mappings
• L Drive
• Single place for all campus labs to store
  information.
• N Drive
• Provides access to college/departmental folders
  and Administrative office folders.
• P Drive
• Projects drive. Any need for data storage that is
  not specific to a department or college (Mcnair
  project,NOVA)
• Q Drive (same function as current)
• U Drive
• Personal docs, private space for users.
• W Drive
• Web space for users, functions same as old one
  but all web pages will be located at
  http//people.eku.edu/username.

3
Drive Mappings Screenshot
4
The N Drive
5
The P Drive
6
The Q Drive
7
The U and W Drives

• The U and W drives would have user docs in
  them. Both have quotas assigned.

8
Automatic Windows Updates

• Will help prevent virus infections by keeping
  PCs more up to date
• SUS (Software Update Services) will be used to
  provide local copies of Windows Updates
• Clients will be configured to Install
  everything
• SUS allows us to Approve updates that clients
  would install
• Registry key will remove reboot requirement. Only
  if nobody is logged into the PC will it reboot
  after installing updates.

9
File Permissions

• By Default
• All employees can see and edit documents inside
• Their u\ drive
• Their w\ drive
• Members of a department will have read access to
  the top level of their departmental folder.
• People who are in the Department Admins group
  can create folders and grant permissions to
  folders inside their department area.
• People who are in the College Admins can see
  inside all the departmental folders in their
  college and create folders and grant permissions
  inside those folders.
• There are College and Dept admin groups for each
  college and department (cas_CollAdmins or
  cas_eng_DeptAdmins)

10
Joining PCs to domain

• Not required for Windows 98
• Required for Windows 2000/XP
• ITDS Staff will have permissions to create
  computer accounts in the domain and join
  computers.

11
Quota

• Departmental Quota 3Gig by default
• Departmental Web 200M by default
• User Home Folder 1G by default
• User Web Folder 50M by default
• Software can email a user or group as an area
  runs over quota.
• Popup message can be sent to user or group on
  quota overrun.

12
Novell Client

• Novell client removed wherever possible
• Login scripts will be disabled (on client)
• O drive not needed as Internet Native Banner is
  in production (http//banweb.eku.edu)

13
User Groups/Roles

• College Administrator
• Department Administrator
• There are groups for each of these roles made for
  every department and college
• Ex (College of Arts and Sciences Admin)
  Cas_CollAdmins
• Ex (Department of Nursing Admin)
  chs_nur_DeptAdmins
• Ex (Faculty group for College of Business and
  Techology) cbt_faculty

14
File system Groups

• Groups are made for each file system resource
  from top level down to department.
• N\Administrative
• Group Name Administrative_R
• Group Location (in Active Directory) Inside the
  Administrative OU.
• Group would be granted (R)ead access to the
  Administrative folder on the N drive.

15
How rights will work

• Bob works for the english department
• He is a member of the english department faculty
  group (cas_eng_faculty) because we see in Banner
  he works for that department.
• Cas_eng_faculty is a member of cas_faculty.
• Cas_faculty is a member of All_faculty.
• All_faculty is a member of All_Emp.
• All_Emp is a member of the following groups
• Colleges_R
• cas_R

16
Documentation/Collaboration

• http//ad.itds.eku.edu
• Listserv created for ITDS staff and
  building/college Administrators.

17
Backups

• Tivoli Storage Manager
• Part of consolidation effort
• Much longer data retention (at least two years
  with current hardware)
• Faster backup time

18
Personal Sites

• Will be moved when a PC is visited
• New location is http//people.eku.edu/username
• Department pages moved by departmental web
  person, or by us as we visit computers.

19
College/Dept Sites

• A department or college web person will be
  determined before dept conversion.
• Site can be moved to new location as soon as
  person responsible has been converted.
• Location on web will remain the same.

20
Data Movement

• Process of copying data from Novell servers to
  Windows servers
• More data than quota
• College/Dept admin must help determine what
  should be moved
• Requires person responsible to keep Novell client
  for a period of time.

21
Rollout problems

• Scheduling
• Summertime (some faculty are off campus)
• Need to access Novell data
• Time required
• Must touch every PC

22
SID Issue

• The issue
• Possible security problem for users
• Virus may take advantage
• Fix 1 sysprep computers as we convert them
• Can do computer rename, join ad, resolve SID
  problem in a single reboot
• Requires OS install key (on side of PC)
• MS supported
• Fix 2 sysinternals sid generator
• Can fix with a single reboot
• Does not require OS key
• Not supported by MS

23
Rollout Schedule

• College of Business and Tech (done)
• Library (done)
• Corbin Campus (done)
• Justice and Safety (in progress)
• College of Education
• College of Health Sciences
• College of Arts and Sciences
• Administrative Areas
• Done by July 1st, 2005