Enterprise IT Update August 3 2012 Introductions

Enterprise IT Update August 3, 2012

Introductions AIT Personnel – Mike Alani: Senior Network Engineer – Jay Carper: Exchange & Active Directory Administrator – Gene Curtiss: Senior Systems Administrator – John Willis: Chief Architect Department IT Managers - New: RPTS: David Burdette - New: TIGM/Plant. Geno: Michael Mc. Cleod

Information Technology Today IT State of Affairs

Rules and Procedures http: //agrilife. org/it/itmanagement/ Rules and Procedures Progression • IT Managers accountable for maintaining all Rules and Procedures • IT Managers should be up to date and highly aware • Approved by Administration • If unsure of rule/procedure ask AIT for clarification

Agri. Life Enterprise Service Status Deployed Services • Email – 4176 mailboxes, 293 distro groups and 16 email domains • Domain managed systems – 2453 computers in domain – All centers and urban centers fully joined/some departments fully joined – Advantages: Acct. Mgmt, Policy Application, SUS, Enterprise File Services • Managed Network Hardware (Regional Centers) – 99 WAP – 125 Switches (approximately 3000 ports) – 22 Firewalls • Sophos – – 5490 computers protected Upgrade to version 10 completed Review estate; if not upgraded turn on computer or perform manual install New single installer model requires that you move any new installed PC’s in console from “New. Unassigned” folder to unit folder in Sophos Console – New Domain enabled console uses domain credentials

Agri. Life Enterprise Service Status Deployed Services – continued • Nessus – Feature of the Server Management Program – Report sent once a month during first week of month – Recommend addressing critical/high alerts asap Recently or Soon to be Deployed Services • Windows System Update Service (WSUS) – Deployed to all centers and urban centers – Improves bandwidth utilization for centers – Provides snapshot report of update status of domain workstations or windows servers – Report addresses requirement by system policy to represent unit’s efforts in maintaining patch management of workstations/servers • Centrify – Centralizes Linux or MAC server account management to AGNET Domain – Brings server into compliance with certain required policies

Agri. Life Server Management Program (SMP) Overview • Who developed the program? – AIT working in conjunction with system auditors • Why was it created? – Clearly outline all required tasks and documentation specified for a server to be TAC/SAP compliant in a consolidated location • Where should you be now (a month after program release)? – Read program documentation – Formulated any questions and requesting answers from AIT to resolve – Preparing to review servers within your department to determine if they are fully compliant with program requirements i. e. TAC/SAP compliant • Next Steps – Create updated comprehensive listing of servers and define type – Perform all required tasks and documentation efforts • When – By December 2012 – In preparation for system audit starting as early as January 2013

Agri. Life SMP • What does it include? – – Monthly automated Nessus scans Access to Centrify Licenses Recommended baseline templates Centralized document management system Document Management • SMP requires a number of documents (see baseline templates) • Centralized document management system to maintain required SMP documentation (https: //agrilife-smp. tamu. edu) ( • Common location allows ease of access for IT personnel and audit purposes

Agri. Life People Management (APM) Overview • Centralized web based portal to manage the onboarding and offboarding of employees across the entire organization • Developed per input from representatives of IT managers, departmental business and HR coordinators • Usage of the portal is required by ALL centers and departments/groups within Ag • Account request form no longer accepted beginning September 1 st • Inactive account report responsibilities • Account deactivation automation – 120 day deactivation : August 20 th – 150 day deletion: September 1 st

University Student Domain Offering –Paul Greer –Bill Cochran

Take Aways – – – Initiate Server Management Program Efforts Review and familiarize all Rules & Procedures Review and assess all inactive accounts Assess workstation Domain Join Status with Department Implement WSUS integration Implement Centrify (mac or linux platforms) IT Management Repository http: //agrilife. org/it/itmanagement/

Questions ?