Next Generation Desktop Service

1
Next Generation Desktop Service

• Migration of CDE userswithin faculty
  areasPreliminary meeting 9 August 2007

2
Session Overview

• What is NGDS?
• Key service features
• Current status
• The next phase
• Project deliverables
• Procedure overview
• Procedure detail

• Training for technical staff
• User Communication
• Project risks
• Project control and monitoring
• Support during migration

3
What is NGDS?

• A new desktop service to replace the current CDE
  service
• In the first instance
• Based on MS Active Directory
• Enhanced server management and reliability
• Support from 4Sol consultants

• Better systems management, auditing security
  tools
• Robust user tools (email etc)
• Better collaboration opportunities
• No unauthenticated network access

4
Active Directory

• The core of NGDS
• An integrated directory service developed by
  Microsoft
• A single user entry can provide
• remote access to the network
• allow Exchange messaging
• provide database access for accounting
• access to centrally-provided applications

5
Active Directory

• Single Sign-On
• At login, automatic access provided to all
  services and applications to which they are
  entitled
• Groups can be defined to access a specific
  service
• Remote Support and Software Updates
• updates and patches pushed to users' desktops
  without user intervention

6
Remote Administration

• MS Systems Management Server (SMS) automates
  change and configuration tasks for groups of
  users
• Local client will be installed on every PC
  connecting to UU Active Directory
• Updates and patches pushed remotely and
  automatically. No user intervention (except for
  Restart prompts)
• Groups can be targeted to receive specific
  software

7
Remote Support

• Helpdesk Team can view users desktop and talk
  user through problem remotely
• Helpdesk can share desktop to assist with
  problem
• Desktop can be reset to original configuration
• Reporting tools can survey desktops to provide
  information on hardware specification and
  software

8
Anti-virus Protection
Sophos is the anti-virus software for NGDS
Updates pulled automatically from Sophos server
to central UU server
Updates then distributed to UU workstations
9
Networked Folders and Backups

• Each NGDS user will be provided with a networked
  (or home) folder.
• Disk quota of 250 Mb
• Shared folders can be created for Groups
• Key data can be stored on central servers within
  home or shared folders
• Older material may be archived (and restored when
  required)

10
Email

• MS Outlook 2003 SP2 is default mail client
• University Email address remains unchanged
• Mail quota of 250 Mb
• Email access can be devolved to delegates
• Web Interface has Outlook look and feel
• Synchronised with Outlook 2003

11
Calendars

• Individual, group or public calendars
• Composite view across several calendars
• work
• personal
• Department
• University
• Pop-up flags to accept or decline appointments

12
Current Status

• October-November 2006All of ISD IT areas
  migrated
• January-April 2007300 corporate CDE users
  migrated
• June 2007 present225 corporate PCs to be
  migrated(including some with memory upgrades)

13
The Next Phase

• CDE users in corporate and faculty areas that
  have PCs of required specification
• The minimum specification is

Memory 512 Mb Processor speed 2 GHz Hard Disk
size 20 Gb key data may be stored centrally
14
How Have We Identified Target PCs?

• Active Directory tool SMS
• Polls current CDE users and identifies
• Machine type
• Ram
• Operating System
• Location

15
Summary of Results
Staff on the ground may be aware of other
machines. Only logged-in users have been
identified.
16
Project Deliverables

• Full logins to AD
• Email accounts hosted on AD
• CDE email transferred to AD accounts
• Office 2003
• SMS client
• Sophos anti-virus
• McAfee on 256 Mb PCs

• PC will have an assigned name based on campus and
  AD tree group
• Access to existing CDE shares will be maintained
• Local profile will be created for user
• The existing operating system will be retained at
  present

17
Desktop Changeover

• Operating system will remain the same initially
• Mostly XP, some Win 2000
• Login to AD set up
• Exchange email set up
• Office 2003 will be installed on all NGDS systems
• Current shared folders and corporate access set
  up

18
Procedure Overview

• Stage 1
• Identify the target user group for the next
  days migrations and inform the local ISD
  co-ordinator
• Stage 2
• Visit PC and carry out preparatory work
• Stage 3
• AD Administrator will migrate accounts from CDE
  to AD
• Stage 4
• Conduct a series of post-migration checks and
• re-enable firewall settings

19
Stage 1 Identifying Users for Migration

• Identify the target group for the next day
• Forward the following information to the local
  ISD co-ordinator in separate text files and with
  1 item/line
• User ecodes
• A list of servers on which the users may have
  permissions
• PC Names

• PC Naming convention based on
• Campus
• Laptop or PC
• Predefined list exists
• JNDPC7500 JNDPC8000
• It must be consistent across the whole faculty

20
Stage 2 Preparatory Work at User PC

• Run a script to
• Add AD\Domain Admins to local admin group
• Rename PC to agreed name
• Delete DNS and WINS and configure the network
  settings
• Ensure the PC is left powered-on overnight (but
  not logged-in)

• Before joining the AD domain
• Enable file and print sharing
• On 500 Mb PCs, uninstall McFee
• Retain on 256 Mb PCs but stop and disable
• Disable any firewalls (inc. Windows)
• Set Remote Registry service to Automatic

21
Stage 3 AD Administrator Tasks

• The AD Administrator will now migrate the CDE
  accounts to AD on overnight process
• Mailboxes on exchj1/c1 will be moved to
  Mailservice

• Outlook settings will be migrated
• Access rights for printers, servers and shares
  will be migrated
• Sophos and the SMS client will be installed
  remotely by ITUS

22
Stage 4 Post-migration Procedure

• Check that target PCs have been migrated
• Check that all user profiles have been migrated
• Check that the email is working
• Re-enable the Windows firewall

• Re-enable McAfee (if Sophos has not been
  installed)

23
Training

• ITUS will provide hands-on migration training to
  faculty staff
• This will be arranged via the local co-ordinators
• ISD will provide documentation on the procedure
• This will be located within the shared area
• Where there is a small number of PCs to be
  migrated within a faculty/campus (lt10), ISD will
  carry out the migrations

24
Project Controls

• Progress Monitoring
• Faculty co-ordinators migrated to AD
• Shared area created to hold migration
  spreadsheets
• Problem Management
• Issues can be escalated via ISD Helpdesk
• Support provided by ITUS migration teams

25
ISD Roles and Responsibilities
26
Communicating with Users

• NGDS users website created
• www.ulster.ac.uk/isd/itus/ngds/users
• Promotional Leaflet advising of key features of
  NGDS
• Plan to poll users regarding migrations

27
Project Risks and Contingency Plans

• Migration process
• Potential bottleneck if key staff are absent
• ITUS Support
• Potential human resource issues at start of year

28
Agreeing The Next Steps

• Who will be involved?
• Migration staff will need to have
• AD accounts
• access to ISD shared area
• Liaison
• 1 faculty co-ordinator/campus who liaises with
  local ISD co-ordinator
• Timescales
• Training