150 likes | 465 Views
Inside Microsoft: Running the IT Infrastructure at Microsoft. Adhunik Chug Director, IT Infrastructure Services Microsoft IT. Microsoft IT Priorities. Be Microsoft’s first and best customer Enabling world-class and predictable customer, client, and partner experience
E N D
Inside Microsoft: Running the IT Infrastructure at Microsoft Adhunik Chug Director, IT Infrastructure Services Microsoft IT
Microsoft IT Priorities • Be Microsoft’s first and best customer • Enabling world-class and predictable customer, client, and partner experience • Protecting Microsoft’s physical and digital assets
Redmond Reno SVC (BC/DR) Microsoft IT Environment 111,000+ e-mail server accounts 334,000+ PCs and devices 9,000 Servers 10,000 network devices Single Instance SAP (1.9Tb Db) Dublin Tokyo 441 buildings Singapore 104,000 end users 83 countries 3M+ e-mail messages per day internally 99.99% availability 9.5M+ remote connections/month
IT Organization • Centralized IT operations • Reduced operation costs • Required for effective standardization • Federated Business Systems Groups • Regional representation • Account managers are the “face” of IT in regions • Provides understanding of local business and cultural issues • Allows for local accountability and involvement with the business – Links IT service levels directly to localized business drivers
Centralized Infrastructure Services • Core Infrastructure Management Services • Network Operations • Data Center Server Operations • Telephony Operations • Database Operations • Application performance monitoring • Desktop Management • Patch management • Software deployment • Image management • Data Protection Services • Identity Management • Messaging and Collaboration Support • Virtual Server and Storage utilities
IT Config CMDB Trouble Ticketing Messaging MOM 2007 Events Third-Party Network Events Server MOM 2007 Events LOB Application Events Enterprise Monitoring And Control MOM 2007Centralized Management Console Out-of-box integration Custom integration
IPSec Workgroups Remote access clients/dial-up Labs & Pilots~38,000 Client Management Services Separate SMS Hierarchies All Devices ~330,000 Devices managed through SMS: ~265,000 Secure Net Devices ~270,000 Datacenter : ~16,000Desktops : ~211,000 • Other misc. special testing hierarchies • Completely centralized administration • Cooperative computer management model • IT & users working together
Mitigate risk to the infrastructure through implementation of four key strategies Securethe Network Perimeter Securethe NetworkInterior SecureKey Assets Enforce Security Strategy Secure Wireless Smart Cards for RAS Network Access Protection Patch Management IPsec Segmentation Smart Cards for Admin Access IPSec for key assets Strong enforcement
Wireless Access Point Network Wireless Access Point Infrastructure ACLs Forwarding ACLs ISA configuration (FW)& Policies DomainController User Provisioning RRAS/ISA SE(VPN) configuration & policies Router ACLs ISA (Proxy)Configuration & policies Router ACLs Wireless Access Point Health Certificate Server(PKI) configuration& policies Forwarding & Infrastructure ACLs Forwarding & Infrastructure ACLs ADAM Forwarding ACLs LOB App ISA (FW)configuration & policies RRAS configuration & policies DHCPconfiguration & policies User Provisioning SharePoint PKI configuration & policies User Provisioning SharePoint Domain Controller IAS / NAPconfiguration & policies Router DomainController LOB App Fix up resources Forwarding ACLs
Comprehensive Portfolio Services Edge Server Applications Encrypting File System (EFS) BitLocker™ Network Access Protection (NAP) Information Protection Client and Server OS Identity Management SystemsManagement Active Directory Federation Services (ADFS) Guidance Developer Tools
MOF Based Organization Structure of Remote IT Services Operations Services and Configuration management Service Owners (E.g. Windows Infra and Edge services, AD, IdM, Network, RTC, App owners) Release Management Problem Management Server Support Esc Network Support Esc Database Support Esc Telecom Support Esc Global Incident Operations Global Change Operations Service Desk