CalNetAD Planning Committee

December 7, 2001

Updated: 01/23/2001

Agenda

1. Meet Eric Chamberlain, our new AD Administrator

2. Reports from HAAS and Chancellor's Office (COIS) on their AD tests and experience

3. Service Level requirements for Active Directory

4. Discussion of Distributed File System (DFS) requirements

5. Discussion of Group Policy for IIS servers in Active Directory

6. Discussion of other Group Policies that should be implemented at the domain level as defaults

7. Other

Notes

Reports from HAAS and Chancellor's Office (COIS) on their AD tests and experience

HAAS is investigating migrating to a domain because of the existing integrated infrastructure they have (LDAP, NT servers, etc.). They have performed an 'in-place' upgrade to their domain. DNS is working fine. CalNet logins are working. Unix PAM/SMB logons have worked in mixed mode. They intend to run IIS for course information and web publishing. Converting some of their perl scripts have been a problem. They are considering converting them to VisualBasic.

COIS is investigating establishing users in an OU. They anticpate eventually adding approximately 300 people. They have devised some SMS work-arounds. They are in the early stages of testing. Using ghost. Intend to use IIS.

Service Level requirements for Active Directory

There was general agreement that the support service level of Monday through Friday, 8 am - 5 pm would be satisfactory. Support up to 10 pm would be better. Provision should be made for emergencies such as Active Directory going completely off-line.

Discussion of Distributed File System (DFS) requirements

Six units (HR, EECS, COIS, Law, Econ, and HAAS) expressed interest in using DFS.

Discussion of Group Policy for IIS servers in Active Directory

John Ives led a discussion of various options to improve upon some of the problems associated with IIS. The option most favored by the committee was to establish Domain Group Policies to turn-off some of the more problematic Microsoft server services (e.g., IIS, FTP, NNTP, Telnet, etc.) but allow these policies to be over-ridden by admins.

Discussion of other Group Policies that should be implemented at the domain level as defaults

Active Directory staff are to compile a list of possible domain-wide group policies and present them to the committee at their next meeting.

Other

John Ives distributed copies of comments on Draft 0.6 of the Berkeley AD Design. There was a general discussion of security and firewalls. John volunteered to serve as chair of a Security Subcommittee. Ryan Means, Kevin Burney, Forrest Smalley, Robert Lozano, Karl Grose, Eric Chamberlain, and Mike Blasingame volunteered to serve on the committee.