|
|
UWSTUDENT & UWYO Active Directory Domain Merger
5/17/2005
As a part of the forthcoming upgrades to the campus computing environment that
includes the introduction of the WyoWeb Campus Portal and Exchange E-mail for
students, Information Technology will be merging the UWSTUDENT Domain into the
UWYO Domain. These changes are being made
to facilitate the upgraded systems and to help provide a better, more consistent
experience for students, faculty, and staff. This change may have some effect
on the day-to-day operation of some users and may require reconfiguration of
some campus systems such as non-UWStudent Lab Systems and departmental domains
as examples. Information
Technology is working hard to test all possible scenarios to help to explain
what effects the merger may have and minimize any downtime required. Details are subject to
change, please check this site frequently for updates.
When will this merger happen?
The domain migration is scheduled to occur over the weekend of June 4th and 5th,
and while all efforts are being made to minimize disruptions, they may
be unavoidable. Information Technology is still working out the details of the
merger, so the specific amount of time the merger will take is not currently
known. As further testing is completed, this site will be updated, so check back
frequently.
What exactly is going to take place?
IT is merging the user, group, and computer accounts that exist in the
UWSTUDENT.WINDOWS.UWYO.EDU domain (more commonly referred to as the UWSTUDENT
domain) into the root domain WINDOWS.UWYO.EDU (more commonly referred to as the
UWYO domain). When this is completed, the UWSTUDENT domain remain until July
31st for historical permission mapping purposes only *** , after July 31st the
UWSTUDENT domain will be completely
decommissioned and will no longer exist.
- Computer accounts on the UWSTUDENT domain consist solely of UWSTUDENT Lab
computers, so this will have no effect on campus users.
- Security groups, with the exception of the "UWSTUDENT\Domain users" security
group, have not been maintained and were not for public use; therefore, they
will be discontinued and will not be merged into the UWYO domain. Anyone
using the "UWSTUDENT\Domain Users" security group will need to update their
security settings to use the new UWYO domain security group
called "UWYO\UWSTUDENTS" prior to the merger.
NOTE:
If you were using any security group from the UWSTUDENT domain other than
"Domain Users", please contact your departmental computer support specialist
and tell them the specific group name you are using so alternative solutions
can be explored as resources permit.
- User accounts from the UWSTUDENT domain will be merged into the UWYO domain.
These accounts will be merged using a utility that maps the historical security
information for the user account as a part of the new account it creates on the
target domain. This is being done so that objects that have been secured using
UWSTUDENT domain accounts will remain accessible to that account after the
merger. For example, "Student1" has an account on the UWSTUDENT domain.
Currently, because there are two domains, the account is referred to using the
domain and account name, so it would be called "uwstudent\student1". After the
merger, the account for the student would still be “Student1”, but it will exist
on the UWYO domain, so it will have the account name "uwyo\student1". The
utility maintains a "mapping" that states that anywhere “uwstudent\student1” was
used to allow access on an object, now allow “uwyo\student1” that same access.
This history is being maintained to help minimize the impact and immediate
changes necessary as a result of the merger;
however, this mapping will be discontinued on July 31, 2005, so if you
specifically set permissions using a UWSTUDENT domain account, you should make
plans to reset those permissions using the new account for the student on the
UWYO domain prior to that date.
NOTE: This history will exist for USER Accounts only; it does not work the same
way for the "UWSTUDENT\ Domain Users" security group, so anywhere you are using
that group to set permissions, you must update it with the "UWYO\UWSTUDENTS"
security group prior to the domain merge date of June 5th. After that date the
group will no longer exist.
Some other areas that will be affected by this merge include Domain Trust
Relationships (with both UWSTUDENT and UWYO Domains) and the use of the student
roaming profiles on the lab system. Both of these issues will be discussed in
more detail in the FAQ's further down in this document. As a starting point, we
have created a Quick Reference section that has the major bullet points that may
need attention by campus users and departments.
Quick Reference
- "UWSTUDENT\DOMAIN USERS" security group use should be replaced with
"UWYO\UWSTUDENTS" security group (can happen immediately)
- "UWYO\DOMAIN USERS" security group use should be replaced with
"UWYO\UWEMPLOYEES" security group (can happen immediately)
NOTE: It is possible for a user to be a member of both the UWSTUDENTS and
UWEMPLOYEES security groups.
- "UWSTUDENT\studentaccount" user account use should be replaced with "UWYO\studentaccount"
(this has to happen post-merger)
- Still under review: Prefixing usernames with "uwyo\" for
such things as restricted site
access, FrontPage editing, Outlook Web Access, and VPN will no longer be
required (but will continue to work)
- UWSTUDENT domain trust functionality will exist only to provide access for
historical UWSTUDENT permissions. Since there will no longer be UWSTUDENT
accounts, no users will be able to login as UWSTUDENT. If you wish to continue
to allow students to login, you need to request a new trust with the UWYO domain from your
departmental computer support specialist. (can happen immediately)
- Existing Domain Trusts with the UWYO domain will not be altered.
– Information Technology
|
