Andrew Windows Activity Review

1
Andrew Windows Activity Review

• Lead Director Tom Dopirak
• Lead Manager Joseph Kern
• Review Date 4/1/2005

2
What is Andrew Windows?

• Goals for Andrew Windows
• Windows 2000 Active Directory (AD) infrastructure
  at CMU.
• Central Account Administration.
• Integrated Kerberos Login providing single
  sign-on to core applications (calendar, email).
• Application Deployment (Deferred).
• Security patches for OS and applications
  (Deferred).
• Reduced Departmental Admin costs.
• Distributed File System for consistent profiles
  and storage on multiple machines (Deferred).

3
Andrew Windows History

• Fall 2000 Clusters began using Windows Active
  Directory (AD).
• May 2002 Core service became operational.
• http//www.cmu.edu/computing/andrew-windows/SLA.ht
  m
• Summer/Fall 2002 Created central NTFS File
  Server and migrated Netware DSP customers to
  local Windows Member Server.
• Fall 2003 Software Update Server (SUS) brought
  online to provide OS patches to clusters and some
  domain users.

4
To whom is Andrew Windows provided?

• Following priority Order for Customer Base
• Andrew Domain Members Clusters.
• Andrew Domain Members Desktop Support Program
  (DSP).
• Andrew Domain Members Dept-Admins.
• Departmental AD Forests - Non-Andrew Domain
  Members.
• Standalone Members student PCs, home machines.

5
Clusters

• Support approximately 200 Windows machines with
  80 Applications.
• OS and application installation.
• Operating System Security.
• Ability to update applications dynamically.
• Ability to test and support multiple
  configurations.
• Dynamic print configurations.
• Kerberos accounts and passwords.

6
Desktop Support Program

• Support approximately 192 Windows boxes (44 of
  Windows machines).
• Support back-end NTFS file-services on a
  cost-recovery basis.
• Operating System Security.
• Kerberos Accounts and Passwords.
• Some limited fileserver support for Mac
  down-level clients.

7
Desktop Support Program File Server Usage

• NTFS1
• Planning - 15GB, 4.2GB Free
• Budget - 10GB, 4.1GB Free
• Treasury - 10GB, 5.2GB Free
• Finance - 120GB, 51.9GB Free
• Unused Partition - 28GB Free
• NTFS2
• CMITES - 10GB, 5.2GB Free
• Government Relations - 10GB, 9.4GB Free
• Presidents Office - 20GB, 13.8GB Free
• Qatar - 20GB, 19.4GB Free
• Unused Partition - 126 GB Free

8
Desktop Support ProgramSUS Usage

• Athletics
• Budget
• Architecture Labs
• Telecom
• Finance group
• Planning
• Treasurer
• Enrollment
• OIE
• CMAP
• Skibo Coffee House
• Almost all other clients are set to Auto-update.

9
Departmental Computing

• Distributed Control via Organizational Units
  (OUs).
• Kerberos accounts and passwords.
• AD machine counts (approximate)
• Physics (89 machines)
• Chemistry (75 machines)
• HSS (231 machines)
• CFA (83 machines)
• CEE (100 machines)
• FMS (110 machines)
• LIS (276 machines)

10
Other Stakeholders

• Departments running their own AD.
• Windows users at large
• Help Center
• Computing Services
• Communication Group
• Security Group
• Clusters and Network Group (Terminal servers)

11
Identifying Customer Needs

• Clusters and DSP
• Periodic scheduled meetings
• Departments
• Direct Email
• Email to Advisor
• Dept-Computing Group Forums
• Dept-Computing Group Mail List
• TAC
• SAC
• Internal
• Ad-hoc meetings

12
How is Andrew Windows service provided?

• Staffing
• Hardware
• Space
• Workflow
• Operational Issues

13
Staffing

• Dave Stevens (departing for CMU-Q) - .95 Andrew
  Windows
• Focused on server maintenance and security.
• Some ancillary work with Telecom, DSP, IT
• Jeff Pencosky (departing for Security group) -
  .60 Andrew Windows
• Focused on File Servers, Server Builds, Andrew
  Windows Support
• 2nd level support (wireless, windows at-large.)
  .4
• Ken England - .60 Andrew Windows
• Focused on DSP, SUS, File Services, Andrew Win
  Support
• 2nd level support (mulberry, networking, etc.)
  .4
• Gregg Diskin 1.0 Andrew Windows
• System Developer Kerberos code, LDAP Trigger
  Server
• Nicole Camaioni - .1 Andrew Windows
• Focused on issues related to clusters and
  coverage
• AppSoft (cluster application builds) .9
• John Orefice .30 Andrew Windows (started in
  December 03)
• Focused on Authentication, Windows 2003, WSS, MOM
• Other Systems group responsibilities (Release
  Engineer, Office Productivity) .1
• Joe Kern - .4 Andrew Windows
• Managing the Windows Team

14
Existing Hardware

• 4 Domain Controllers (gt3 yr)
• 2 Dist Servers (gt1, gt3 yr)
• 1 Term Server (gt3 yr)
• 1 Internal fileserver (lt1 yr)
• 2 DSP Fileservers (1 yr, gt3 yr)
• 3 MOM boxes (1 lt1 yr, 2 gt3 yr)
• 1 WINS Server (gt3 yr)
• 1 SUS Server (gt2 yr)
• 1 Trigger Server (gt2 yr)
• 4 Lab machines
• Machines with lt 100 days of warranty
• Total 8 Production machines (after MOM
  deployment)

15
Space

• Staff
• 1 Empty office (D. Stevens)
• 3 Single offices (K. England/G. Diskin/J. Kern)
• 3 Shared offices
• Operations
• Approximately 15 machines in B7
• Will need to grow with services
• Lab
• 4 machines
• Will need to grow with services and CMU-Q

16
Workflow Inputs

• Remedy Incidents.
• Direct Requests (email, IM, phone) to Support
  Engineer.
• Mon alerts.
• Internal Computing Service Requests.
• Meetings (AppSoft, DSP, HC, Dept-Computing, SAC,
  TAC, etc.).

17
Dependencies

• Operations monitoring, backups, machine space.
• Help Center 1st level support, timely 2nd level
  escalation.
• NetDev monitoring (MON)
• Microsoft site license
• Security office (Password policies, guidelines,
  etc.)
• Input from DSP, Dept-Admins, App-soft.

18
Operational Issues - Staffing

• Departure of two team members (Stevens/Pencosky).
  
• Printing Discovery Results how much work will
  potential implementation be for the Windows team?
• DSP Discovery effort how much work will this
  require for Windows team?
• Limited skills with .NET programming.

19
Operational Issues Hardware and Costs

• Hardware is aging trickle-down.
• Need capital to upgrade to Win2003 this summer.
• No MS Support Contract (PSS).
• Travel funding insufficient to cover growing
  conference fees.
• Backup costs ability to pay for operations
  backup as services expand is limited.

20
Operational Issues Workflow and Dependencies

• Qatar Integration.
• Direction related to WinAFS
• Direction related to single sign-on pass-through
  authentication (Windows Application Support)
• Limited relationship with Security Group.
• Help Center doesnt support Andrew Windows

21
Operational Issues - Space

• Continue to need lab space for test domain.
• Growth Issues
• DSP requirements

22
Andrew Window Needs.

• Capital funding for HW replacement.
• Full staffing complement recruiting help.
• WinAFS direction from Directors (discovery
  project?)
• MS support contract (PSS).
• Training/seminar funding.
• SLA with security office.
• Qatar direction.
• Desktop Support direction (DSP).

23

• The End

24
Andrew WindowsRecent Accomplishments

• SUS Deployment
• LDAP Trigger Server
• Userserv Hardware Upgrades
• 2nd DSP File Server
• WSS
• SAV Modifications

25
Andrew WindowsShort-Term Plans

• Hire Qualified Replacements
• Qatar
• SUS2 (WUS) Deployment
• MOM Deployment
• Win2003 AD Upgrade
• Windows 2000 Phase-out
• WinXP SP2 (potentially XP Reloaded)
• Folder Redirection Pilot (NetApp Filers?)