Active Directory
Remote Monitoring & Management
Active Directory is a resource that includes users, computers, and groups. It allows for efficient sharing and management of information and network resources across the organization. The source of records for billing and all user counts will be obtained from the Active Directory.
The Active Directory service provides a single, consistent point of management for users, applications, and devices. It is used for managing permissions and user access to network resources. Simplified management and use of file and print services make network resources easier to find, configure and use. All data is hierarchical, replicated, and extensible. Typical examples of data stored in the Active Directory include printer queue data, user contact data, and network/computer configuration data.
Setup
- Create new users and disable/remove old users
- Create/Modify standard group policies
- Configure monitoring
Roles & Responsibilities
Collabrance Responsibilities
Standard Service included in support fee
- Keep Active Directory clean and up to date
- Troubleshoot any system generated alerts
- Ensure proper DNS set up
- Unlock user accounts
- Reset user passwords
- Disable users
- Application log monitoring
Elective Services available for additional fee
- Perform an authoritative restore of Active Directory
- Create additional GPO's at request of Subscriber or Service Provider (Requires Statement of Work)
Service Provider Responsibilities
-
Configure DNS Server services per the DNS Best Practices
-
Configure DHCP Server services
-
Configure NTP Server services
-
Configure DNS/NTP Client services
-
Clean up Active Directory during Onboarding Process
-
GPO
-
Audit existing GPO’s for understanding
-
Add Printer assignment GPO
-
-
User and Computer changes
-
Provide updated change forms for users entering or leaving the company (including name changes)
-
Remove computers from N-Central and Active Directory when removing from environment
-
Update the “Given Name” in N-Central when changing the name of a computer
-
Subscriber Responsibilities
- Provide new user and former user forms for employees entering or leaving the company – this should include employee name changes as well
Technical Details
- Service accounts begin with "svc" in name record.
- Active Directory is the source of records for billing and all user counts will be obtained from Active Directory.
NOTE: We rely heavily on our Service Providers and Subscribers to keep us informed of changes to the Users, PC’s and Servers that are part of the Domain. We use New and Former User forms found in IT Glue to add or remove users in the Subscriber environment and many of those changes would relate to Active Directory. If these forms are not completed, user counts will be inaccurate, which could lead to over or under billing issues for the end customer. - Password changes for the Administrator or for service accounts require research into any dependencies before being changed.
- Service accounts should be used wherever practical, rather than using the Administrator account (applications, services, SQL database, etc).
- Changes to Administrator or service accounts should happen during a maintenance window, with appropriate personnel available to test functionality after the change.
Other Active Directory Resources
** Disclaimer: Service Providers must comply with identified Collabrance Requirements in order for items referenced in our Service Catalog to perform properly. **