330 likes | 481 Views
Microsoft. ®. @. Austin Community College. Bigger Trailers. Heavier loads. Same Old Tractor. Once upon a time At a campus not too far away. There was a Mac. Surrounded by HUNDREDS of. PC’s!. Happily running Microsoft Operating Systems. Like DOS 6.2 or Windows 3.1. Then, along came.
E N D
Microsoft ® @ Austin Community College Bigger Trailers. Heavier loads. Same Old Tractor.
Happily running MicrosoftOperating Systems Like DOS 6.2 or Windows 3.1
Then, along came ACCNet
When ACCNetwent live… ACC ordered lots of DELLS Running Windows®95
Next came a server Dude, it’s a DELL! What OS does it run? Microsof NT 4 And who gets hired to admin it? <drumroll>
A command line challenged, GUI-Dependent tech that used to teach art and woodworking for 13 years.
Computers And Servers “We are a Microsoft Shop.” - Bill Carter And yet…
A brief history of Microsoft in the Information Technology Deptartment Lou Herman leaves Austin Community College and is survived by Bill Carter as AVP for Information Technology
2000 2007 ACC File Server NT 4.0 Server Inherited the Infonet domain Acquisition of Dell Servers to host the following ACCADC/ACCBDC – ADDC ACCITFS01 – File Server IT-IMAGE – Image Storage ITSRVS01 – Symantec ITSRVS02 – MS Update ITMS-WWW – WWW3 iCal - Calendar IT34357 – Remedy Honeywell1 Honeywell2 PowerWeb – Fortis Records – Fortis ITMSSQL1 – SQL Server Test2008 - 2008 Creation of new Active Directory primary and backup domain controllers: ACC.Austincc.Edu Apprentice mentor for CIS student learning Exchange Server 2000 Compass/ESL Domain Deployment. Batch scores to Datatel. Move Remedy to new server Deployed Symantec Corp. 7.5 Antivirus HBCFILESRV Business Dept. request for file storage. Start of HBC Domain Server 2000 AD DC Deployment of Windows Update Server: ITSRVS02 IT-Image goes online for the creating and deploying of unified images over a network, Ghost being primary tool. Upload service for workstations investigations. Update and take over administration for Mathmatica Compass/ESL Domain design Adult Basic Education request for application server. Install and deploy Access-A-File (Yech) 09/2000: Server support transferred to Rick Saylor under Systems. Move to SVC 10/2001 Hired by ACCNet to administer servers Bill Carter ExitsGary Wesemantakes interim position Microsoft Support Services.
2007 2010 Testing and implementation of MicroMain, iCal and QuickAddress Pro. HBC Domain taken offline. System moves to IP KVM switches. Rewired server room racks. Services take over Admin of Continuing Ed. Domain OIE Rolls out 3 SAS Servers: SAS Metadata, SAS Web SAS SQL Round Rock Campus goes online. All PCs to have Windows 7 Installed and joined to the ACC domain. Prepped, racked and installed Server 2003 on 2 systems for Honeywell controls. Compass goes Internet. Compass Domain is decommissioned. VMs become popular: Entrinsik, Resource 25 Datatel UI, Sage Fundraising ClassClimate, Student Zen Hardware to VM: QAS, ITMSSQL1, iCal, Shadow, Snap Survey, ACCITFS01, IT-IMAGE Windows Deployment Service implemented on IT-IMAGE. PXE network boot ported to all campuses. HBC Domain Users are migrated to ACC domain Domain usage grows to include public access in some cases. Adoption of Desktop lockdown GPO’s were developed to deter users from non-approved computer usage. Deployed ACCITFS01 for college-wide file storage using ACC SAN and Fiber Channel technology. Begin migration of data off HBC file server to ACCITFS01 Microsoft Distributed File Service adopted as primary source for all network data storage sharing allowing for optimal High Availability All Active Directory Domain servers upgraded to Windows 2008R2. First VMWare servers deployed Stan Gunn New AVP of IT hired 08/2008 Services Dept. fully populated Bob Carnaghi Hired to replace Andrew Dickerman Microsoft Support Services. What do we currently have in place here at ACC?
Internet! Primary Domain Controller Backup Domain Controller Management and Security Policies Distributed File System (DFS) SQL Server Application Servers Hard or Virtual File Storage and Management Clients Exchange Server Image Deployment Service Windows Update Server Internet Informational Server Key Management Service Microsoft Support Services.
And as administrators for a Microsoft Shop some of the things we do are: • SQL support • Image Retention • Exchange support • User management • Image management • Desktop deployment • Remote data servicing • Print server management • Quotas and file restrictions • Storage space management • Windows patch management • High Availability maintenance • Backup and Restoration service • Distributed File Service support • Maintenance of Active Directory • Application platform management • Security management (Virus protection) • Securing Active Directory through domain policies Microsoft Support Services.
Not to mention environment and application support for a few Microsoft Windows based server apps. Microsoft Support Services. Microsoft Support Services.
And YesWe even do a little Microsoft Support Services.
Some projects Bob and I are working on top of day to day duties • Moving all current domain users and departments to Distributed File Service • Upgrading the Windows servers to 2008R2 where possible. • Reconfiguring the primary file server ACCITFS01 to make space more available. • Continued migration of the Continuing Education department to the ACC domain. • Fine tuning Windows Deployment to better meet the needs of end users • Server upgrades for Facilities and Dispatch. • Ongoing patch management to servers • Research on new desktop security software (We will not continue with Symantec next year). • Research into the deployment of O.S. Streaming for virtual desktop use Microsoft Support Services.
And we actually have a roadmap for the futuregrowth of the acccollege-wide Windows user base support! Which is… Microsoft Support Services.
Server Group Operation Projects, directions and plans for the future • Securing the servers. • Structure for domain group policies. • Integration of future child domains D.C. at each campus ITSVCS01 - SEP ITSVCS02 - WUS IT-Image - WDS ITSVCS03 - ESET ACCITKEY DC - ADC DC - BDC DC - DDC DC - EDC DC - RRC ACC DFS Active Directory ACCITFSRRC Campus Servers • Replicated SAN at HBC and SVC = High Availability • Quota and File Filtering • Projection for future data space needs Resource Management ACCITFS02 ACCITFS01 Fiber Channel SAN OS Streaming • Thin-client for Lab, Kiosk and Dept. Useage • Mac OS Support Desktop Deployment PXE Desktop Security Update Mirrors • Dell Patch Management for Server/Workstation • Event Log-file Resource for all servers. • Reporting trends. Asset, Security Patch Management ???????????? ACC IT APPS Platform and Application Support HW VM Microsoft Support Services.
Under “Normal” circumstances, responsibilities would be farmed out to appropriately trained administrators. This would allow for focus and attention to details to what ever responsibility they are assigned to… such as… Microsoft Support Services.
Active Directory Administration • Communication and coordination • Host and maintain server (i.e., IIS, business specific service, etc.) • Patching/software upgrades • Volume/partition space management • Hardware migration Software licenses for all member server(s) added to their OU hierarchy • hardware maintenance for all non-Infrastructure-managed member servers • Operating system maintenance for all non-Infrastructure-managed member servers • Maintain level of member server system security by applying Service Packs and security patches • Department application, file service, workstation and printer support • Create printer objects and access control lists. • Backup/recovery • Full disaster recovery plan and practice • Creation and management of directory infrastructure • Monitor and reporting associated with the reliability and security of the domain • Domain Controller Management • Policy monitoring and compliance • Communication and coordination • Secure remote administration of the DCs and member servers managed by the Infrastructure Group • Manage group policy at root of domain and for Domain Controllers OU • Creation, testing, and management of GPOs intended to be used by multiple OU Admins • Manage the Users and Computers Containers • Install and manage security reporting tools used to monitor changes to the Active Directory • Delegate monitored data and elevated privileges to others as needed • Create and maintain the test domain as a reasonable approximation of the production domain • Coordinate and configure alarm distribution to OU Admins for OU-related events • Plan and manage all migrations and upgrades related to the AD or the DCs • Verify new software deployments and GPO policies work by testing them in the Primus test domain as appropriate • Ensure overall security and integrity of their managed OU hierarchy • Account management • The OU administrator will designate which administrators have "account operator" access to the Windows user accounts for users in their department. • Group Policy Object (GPO) administration, troubleshooting, and management • Publishing resource objects from their OU hierarchy in the Active Directory as applicable • Manage Group Policy Object (GPO) links in OU hierarchy • Coordinate activities of Member Server owners • Policy Compliance • Contact information. • Verify new software deployments and GPO policies work by testing them in the Primus test domain as appropriate. Microsoft Support Services.
ResourceManagement Asset, Security andPatch Management DesktopManagement • Planning deployment strategies. • Manage Windows Deployment Servers • Secure access through Active Directory • Test and maintain boot images. • Failover and Disaster recovery policies • Testing for Windows compatibility for all supported ACC applications. • Packaging and distribution of application packages as options during a bare metal Windows installation. • Incorporating new drivers as new hardware becomes common. • Updating images as major Windows and program security patches are released. • New distributable images • Troubleshooting deployment problems. • Resource monitoring, maintenance and upgrades strategies for servers. • Communication with workstation support for warrantee and model end of life. • Training of personnel in the use of product. • Take request for new domain share request • Maintaining high availability of file • Research cross platform remedies for access of shared resources. • Creation of Distributed File service nodes and management of file sharing. • Quota management based on limits determined by the Technology and IT departments. • File filtering for acceptable use • Monitoring and maintaining log files of resources. • Replication of files • Backup strategies and management. • Restoration of files upon requests • Archiving of department folders upon request. • Proactive malware/spyware/virus threat protection • System hardware monitoring and planning for system hardware replacement and migration. • Printer management and services • Deployment and management of multiple Microsoft Key Management servers. • Monitoring current licensing of Microsoft Volume License product • Dell asset compliance with Microsoft licensing. • Research and deploy Endpoint protection using management console provided by Antivirus security software. • Virus remediation through console management. • High availability and disaster recovery of servers. • Asset management of servers and patch management to firmware • Maintaining and monitoring Windows Update services. • Notification of major updates so new image deployment can be tested. • Checking security updates to understand what they do and Filtering updates as needed for both desktop and server platforms. Microsoft Support Services.
To Microsoft Or Not to Microsoft ® ® Microsoft Support Services. There is no question here.
To properly maintain a Microsoft environment on both server, network and workstation level efficiently, a support backbone must be in place Microsoft Support Services.
Truth is I could use at least three more BOBs!!! But seeing that cloning is illegal, We could most certainly settle for A few more positions, like… Microsoft Support Services.
Job Title: Microsoft Domain Administrator Job Title: Microsoft Resource Administrator Job Title: Microsoft Server and Desktop Deployment Administrator (Me! Me! Me!) Job Title: Microsoft Asset, Patch and Security Administrator Job Title: Microsoft Platform & Application Administrator Microsoft Support Services.
Because if we don’t, many things will be overlooked and Windows will look like: Microsoft Support Services.
Microsoft Support Services. Full of holes
Adding these Positions could sure make the life of Brian & Bob not only more focused, but more efficient. Microsoft Support Services.
Thank you For your consideration. Microsoft Support Services.