Windows Account Migration March 2018: Difference between revisions

From UMIACS
Jump to navigation Jump to search
No edit summary
No edit summary
 
(30 intermediate revisions by 2 users not shown)
Line 2: Line 2:


==Introduction==
==Introduction==
UMIACS staff will be migrating all UMIACS user Windows accounts to a new domain to prepare for simplified password management. This migration will kickoff this process by moving from our existing Windows Active Directory domain (pc.umiacs.umd.edu) to a new one (ad.umiacs.umd.edu). After this migration we will be starting a one month migration to consolidate from our UNIX Kerberos5 domain.
Currently UMIACS provides two user authentication stores, our Linux/UNIX Kerberos5 realm and Windows Active Directory (PC). To simplify the user experience we will be consolidating authentication into a single new Active Directory domain (UMIACS).  At the end of the consolidation, you will be able to use a single password for all UMIACS services.
 
To prepare for this change, UMIACS staff need to migrate all UMIACS Windows accounts to a new domain. This migration starts by moving your account from our existing Windows Active Directory domain (PC\username) to a new one (UMIACS\username). After this migration is completed we will follow up with an announcement detailing the final steps of the password consolidation process.


'''No files or emails will be lost as part of this migration.​'''
'''No files or emails will be lost as part of this migration.​'''
Line 9: Line 11:
* Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at this time.
* Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at this time.


==Service impact==
==Service impact during this Migration==
* '''Your password will not change.'''
* '''Your password will NOT change.'''
* Authentication to the Pulse Secure VPN will not be available during this time.
* Authentication to the Pulse Secure [[VPN]] will not be available during this migration window. Existing sessions will not be terminated, allowing you to continue using the VPN through the migration.  Two days prior to the migration, we will extend the default VPN session limit to 48 hours in order to minimize your disruption. If you require the VPN during this time please make sure you authenticate and maintain your connection before the outage window starts.  
* Windows workstations will be unavailable to log into during this time.
* Windows workstations will be unavailable to log into during this migration window.
* Exchange email access will be interrupted during this timeEmail will be delivered however will not be accessible from phones, Outlook, or Outlook Web Access.
* Exchange email access will be interrupted during this migration windowExchange email will be delivered however will not be accessible from phones, Outlook, or Outlook Web Access until after the migration has concluded.


==After the migration has completed==
==After the migration has completed==
* We will post an annoucement on https://intranet.umiacs.umd.edu when the migration has completed and will send a follow-up email announcing this.
* We will post an announcement on https://intranet.umiacs.umd.edu when the migration has completed and will also send a follow-up email.
* Your Windows account will now be of the form <code>UMIACS\username</code> instead of <code>PC\username</code>. '''You must use this username format going forward.''' Services that will require this new format:
* Your Windows account format will change from <code>PC\username</code> to <code>UMIACS\username</code> where you are required to specify a domain. '''You must use this username format going forward.''' Services that will require this new format:
** [[Email/Exchange/OWA | Outlook Web Access]] for [[Exchange]] email users
** Outlook Web Access for Exchange email users
** [[Email/Exchange/PhoneAccess | Phone email setup]] for [[Exchange]] email users
** Phone email setup for Exchange email users
** [[Remote Desktop]] workstation access
** [[Remote Desktop]] workstation access
** Saved [https://support.microsoft.com/en-us/help/4026635/windows-map-a-network-drive network drive] credentials, which can be updated via [https://support.microsoft.com/en-us/help/4026814/windows-accessing-credential-manager Credential Manager]


__NOTOC__
__NOTOC__

Latest revision as of 14:29, 2 July 2020

When: Saturday, March 24th 2018 from 8am-11:59pm

Introduction

Currently UMIACS provides two user authentication stores, our Linux/UNIX Kerberos5 realm and Windows Active Directory (PC). To simplify the user experience we will be consolidating authentication into a single new Active Directory domain (UMIACS). At the end of the consolidation, you will be able to use a single password for all UMIACS services.

To prepare for this change, UMIACS staff need to migrate all UMIACS Windows accounts to a new domain. This migration starts by moving your account from our existing Windows Active Directory domain (PC\username) to a new one (UMIACS\username). After this migration is completed we will follow up with an announcement detailing the final steps of the password consolidation process.

No files or emails will be lost as part of this migration.​

Actions you need to take

  • Log off your Windows workstation (if you have one) prior to 8am on Saturday, March 24th, otherwise you will be forcibly logged out at this time.

Service impact during this Migration

  • Your password will NOT change.
  • Authentication to the Pulse Secure VPN will not be available during this migration window. Existing sessions will not be terminated, allowing you to continue using the VPN through the migration. Two days prior to the migration, we will extend the default VPN session limit to 48 hours in order to minimize your disruption. If you require the VPN during this time please make sure you authenticate and maintain your connection before the outage window starts.
  • Windows workstations will be unavailable to log into during this migration window.
  • Exchange email access will be interrupted during this migration window. Exchange email will be delivered however will not be accessible from phones, Outlook, or Outlook Web Access until after the migration has concluded.

After the migration has completed

  • We will post an announcement on https://intranet.umiacs.umd.edu when the migration has completed and will also send a follow-up email.
  • Your Windows account format will change from PC\username to UMIACS\username where you are required to specify a domain. You must use this username format going forward. Services that will require this new format: