Windows Account Migration March 2018: Difference between revisions

From UMIACS
Jump to navigation Jump to search
No edit summary
 
(47 intermediate revisions by 2 users not shown)
Line 1: Line 1:
'''When: Saturday, March 24th 2018 from 8am-12am''' (midnight on Sunday, March 25th)
'''When: Saturday, March 24th 2018 from 8am-11:59pm'''


==Introduction==
==Introduction==
UMIACS staff will be migrating all UMIACS user Windows accounts to a new domain to prepare for simplified password management. '''No files or emails will be lost as part of this migration.​'''
Currently UMIACS provides two user authentication stores, our Linux/UNIX Kerberos5 realm and Windows Active Directory (PC). To simplify the user experience we will be consolidating authentication into a single new Active Directory domain (UMIACS).  At the end of the consolidation, you will be able to use a single password for all UMIACS services.
 
To prepare for this change, UMIACS staff need to migrate all UMIACS Windows accounts to a new domain. This migration starts by moving your account from our existing Windows Active Directory domain (PC\username) to a new one (UMIACS\username). After this migration is completed we will follow up with an announcement detailing the final steps of the password consolidation process.
 
'''No files or emails will be lost as part of this migration.​'''


==Actions you need to take==
==Actions you need to take==
* Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at the time.
* Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at this time.


==Things to keep in mind==
==Service impact during this Migration==
* Your Windows workstation will be unavailable to log into during this time.
* '''Your password will NOT change.'''
* Exchange/Outlook email access will be interrupted during this time, however mail delivery will not be affected.
* Authentication to the Pulse Secure [[VPN]] will not be available during this migration window. Existing sessions will not be terminated, allowing you to continue using the VPN through the migration.  Two days prior to the migration, we will extend the default VPN session limit to 48 hours in order to minimize your disruption. If you require the VPN during this time please make sure you authenticate and maintain your connection before the outage window starts.
* Your password will not change.
* Windows workstations will be unavailable to log into during this migration window.
* Exchange email access will be interrupted during this migration window.  Exchange email will be delivered however will not be accessible from phones, Outlook, or Outlook Web Access until after the migration has concluded.


==After the migration has completed==
==After the migration has completed==
* We will send a follow-up email announcing this.
* We will post an announcement on https://intranet.umiacs.umd.edu when the migration has completed and will also send a follow-up email.
* Your Windows account will now be of the form ''UMIACS\username'' instead of ''PC\username''. '''You must use this username format going forward.''' Services that will require this new format:
* Your Windows account format will change from <code>PC\username</code> to <code>UMIACS\username</code> where you are required to specify a domain. '''You must use this username format going forward.''' Services that will require this new format:
** [[Email/Exchange/OWA | OWA]] for [[Exchange]] email users
** Outlook Web Access for Exchange email users
** [[Email/Exchange/IPhoneAccess | Phone email setup]] for [[Exchange]] email users (although the page referenced is specifically for iPhones, the principles for Android or Windows phones are similar)
** Phone email setup for Exchange email users
** [[Remote Desktop]] workstation access
** [[Remote Desktop]] workstation access
** Saved [https://support.microsoft.com/en-us/help/4026635/windows-map-a-network-drive network drive] credentials, which can be updated via [https://support.microsoft.com/en-us/help/4026814/windows-accessing-credential-manager Credential Manager]


__NOTOC__
__NOTOC__

Latest revision as of 14:29, 2 July 2020

When: Saturday, March 24th 2018 from 8am-11:59pm

Introduction

Currently UMIACS provides two user authentication stores, our Linux/UNIX Kerberos5 realm and Windows Active Directory (PC). To simplify the user experience we will be consolidating authentication into a single new Active Directory domain (UMIACS). At the end of the consolidation, you will be able to use a single password for all UMIACS services.

To prepare for this change, UMIACS staff need to migrate all UMIACS Windows accounts to a new domain. This migration starts by moving your account from our existing Windows Active Directory domain (PC\username) to a new one (UMIACS\username). After this migration is completed we will follow up with an announcement detailing the final steps of the password consolidation process.

No files or emails will be lost as part of this migration.​

Actions you need to take

  • Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at this time.

Service impact during this Migration

  • Your password will NOT change.
  • Authentication to the Pulse Secure VPN will not be available during this migration window. Existing sessions will not be terminated, allowing you to continue using the VPN through the migration. Two days prior to the migration, we will extend the default VPN session limit to 48 hours in order to minimize your disruption. If you require the VPN during this time please make sure you authenticate and maintain your connection before the outage window starts.
  • Windows workstations will be unavailable to log into during this migration window.
  • Exchange email access will be interrupted during this migration window. Exchange email will be delivered however will not be accessible from phones, Outlook, or Outlook Web Access until after the migration has concluded.

After the migration has completed

  • We will post an announcement on https://intranet.umiacs.umd.edu when the migration has completed and will also send a follow-up email.
  • Your Windows account format will change from PC\username to UMIACS\username where you are required to specify a domain. You must use this username format going forward. Services that will require this new format: