[27796] in resnet
Re: converting from NDS to AD
daemon@ATHENA.MIT.EDU (Doughty, Marc)
Thu Jun 28 11:01:36 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=e89a8fb1edc85e25fa04c38994cb
Message-ID: <CAEPWjzssr=yG+28SZ4192MZVEODmQN_9t=L1OKrg7fGNGjB5rQ@mail.gmail.com>
Date: Thu, 28 Jun 2012 10:59:33 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Doughty, Marc" <marc_doughty@brown.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <CAO7ix5mvkRHpaD7hmnJfCLXodp8VEOtUD2XdDKMgjW7agaYArw@mail.gmail.com>
--e89a8fb1edc85e25fa04c38994cb
Content-Type: text/plain; charset=ISO-8859-1
We did a similar thing at Brown. It was VERY labor-intensive, but there was
really no way to get around that.
We did start with printing, six months ahead of files, just to get a grip
on what things would be like department-by-department.
Also, one thing we -didn't- do that I was a major proponent of was to
SIMPLIFY the share layout. These days, you could have *one* *share* in your
organization called 'files' (or two: 'departments' and 'users'), and just
pile more and more storage into it. Use 'Everyone:Full' *share* permissions
(makes Mac + Linux access much easier, makes restoring and DR simpler, and
I can argue that it's just as secure) and rely on NTFS for your access
controls. Modern storage arrays can be added-to online, NTFS volumes can be
expanded. NTFS can handle petabytes of data and billions of files. There's
no need to split things up between many shares and servers anymore, it's
making accommodations for limitations that no longer exist.
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way
vessel."
On Tue, Jun 26, 2012 at 4:54 PM, Tony Skalski <ajs@stolaf.edu> wrote:
> Hi Becky,
>
> We did this over the course of a year; we have about 2,000 machines and
> approx. 3,800 users. The first summer we migrated our storage to a new SAN
> (NetApp). To do this we had a machine run robocopy every night to sync from
> the old Novell storage to the new shares. On the day of the migration, we
> ran robocopy to sync the old with the new and then shutdown the old and
> updated our login scripts to point to the new shares (using "net use"
> instead of "map", of course). The final sync and cutover didn't take more
> than an hour or two.
>
> We ran like this for about a year, and support folks were able to migrate
> machines to AD as they saw fit. We had a deadline the following summer, at
> which time all clients should have been migrated, and the Novell servers
> were decommissioned. I wrote a script to remove the Novell software
> (client, zenworks, iPrint), do some housekeeping (checking machine name)
> and then joining to the domain. We also re-pointed the users new domain
> account to their existing (DLU-created) profile directory. The entire
> migration process took around 30 minutes per machine, and of course, all
> lab machines were reimaged using a new imaging process.
>
> We had a Novell server in VMWare, and took a snapshot of that and powered
> it off for safekeeping. This was mostly done to facilitate restores from
> backup, which fortunately (cue wood knocking) we have not had to do.
>
> Feel free to contact me off list if you have any other questions. Good
> luck!
>
> ajs
>
>
> On Tue, Jun 26, 2012 at 2:16 PM, Becky Klein <becky.klein@valpo.edu>wrote:
>
>> Hi everyone,
>>
>> (I apologize in advance to anyone who might receive duplicates of this
>> plea.)
>>
>> Valpo is about to embark on the exciting journey of converting our
>> network file servers and directory structure from Novell Directory Services
>> over to Microsoft Active Directory. Has anyone been through this process?
>> Any words of wisdom, tips, tricks, suggestions, etc?
>>
>> Thanks much!
>> -Becky Klein
>>
>>
>> --
>>
>> Becky (Belmont '97) Klein<http://www.google.com/calendar/embed?src=becky.klein%40valpo.edu&ctz=America/Chicago>,
>> Manager of Client Services
>> Chair, Salaried Concerns Committee
>> Valparaiso University
>> Information Technology
>> Phone: 219.464.5986
>> valpo.edu
>>
>>
>>
>> *Valpo has gone Google! Check valpo.edu/googleapps for updates, FAQ's,
>> and much more!*
>>
>> ___________________________________________________ You are subscribed to
>> the ResNet-L mailing list.
>>
>> To subscribe, unsubscribe or search the archives, go to
>> http://LISTSERV.ND.EDU/archives/resnet-l.html___________________________________________________
>>
>
>
>
> --
> Tony Skalski
> Systems Administrator
> ajs@stolaf.edu
> 507-786-3227
> St. Olaf College
> Information and Instructional Technologies
> 1510 St. Olaf Avenue
> Northfield, MN 55057-1097
>
> ----------------------------------------------------------------------------------------------
> St. Olaf IIT staff will *never* ask you for your password via email.
>
>
>
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--e89a8fb1edc85e25fa04c38994cb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
We did a similar thing at Brown. It was VERY labor-intensive, but there was=
really no way to get around that.<br><br>We did start with printing, six m=
onths ahead of files, just to get a grip on what things would be like depar=
tment-by-department.<div>
<br></div><div>Also, one thing we -didn't- do that I was a major propon=
ent of was to SIMPLIFY the share layout. These days, you could have <b>one<=
/b> <b>share</b> in your organization called 'files' (or two: '=
departments' and 'users'), and just pile more and more storage =
into it. Use 'Everyone:Full' <i>share</i> permissions (makes Mac + =
Linux access much easier, makes restoring and DR simpler, and I can argue t=
hat it's just as secure) and rely on NTFS for your access controls. Mod=
ern storage arrays can be added-to online, NTFS volumes can be expanded. NT=
FS can handle petabytes of data and billions of files. There's no need =
to split things up between many shares and servers anymore, it's making=
=A0accommodations=A0for limitations that no longer exist.<br clear=3D"all">
<br>- Marc Doughty<br>"If you aren't sure who is the give-way vess=
el, you are the give-way vessel."<br>
<br><br><div class=3D"gmail_quote">On Tue, Jun 26, 2012 at 4:54 PM, Tony Sk=
alski <span dir=3D"ltr"><<a href=3D"mailto:ajs@stolaf.edu" target=3D"_bl=
ank">ajs@stolaf.edu</a>></span> wrote:<br><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
>
Hi Becky,<div><br></div><div>We did this over the course of a year; we have=
about 2,000 machines and approx. 3,800 users. The first summer we migrated=
our storage to a new SAN (NetApp). To do this we had a machine run robocop=
y every night to sync from the old Novell storage to the new shares. On the=
day of the migration, we ran robocopy to sync the old with the new and the=
n shutdown the old and updated our login scripts to point to the new shares=
(using "net use" instead of "map", of course). The fin=
al sync and cutover didn't take more than an hour or two.</div>
<div><br></div><div>We ran like this for about a year, and support folks we=
re able to migrate machines to AD as they saw fit. We had a deadline the fo=
llowing summer, at which time all clients should have been migrated, and th=
e Novell servers were decommissioned. I wrote a script to remove the Novell=
software (client, zenworks, iPrint), do some housekeeping (checking machin=
e name) and then joining to the domain. We also re-pointed the users new do=
main account to their existing (DLU-created) profile directory. The entire =
migration process took around 30 minutes per machine, and of course, all la=
b machines were reimaged using a new imaging process.</div>
<div><br></div><div>We had a Novell server in VMWare, and took a snapshot o=
f that and powered it off for safekeeping. This was mostly done to facilita=
te restores from backup, which fortunately (cue wood knocking) we have not =
had to do.</div>
<div><br></div><div>Feel free to contact me off list if you have any other =
questions. Good luck!</div><div><br></div><div>ajs<div><div class=3D"h5"><b=
r><br><div class=3D"gmail_quote">On Tue, Jun 26, 2012 at 2:16 PM, Becky Kle=
in <span dir=3D"ltr"><<a href=3D"mailto:becky.klein@valpo.edu" target=3D=
"_blank">becky.klein@valpo.edu</a>></span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><font><font face=3D"tahoma,sans-serif">Hi ev=
eryone,</font></font><div><font><font face=3D"tahoma,sans-serif"><br></font=
></font></div>
<div><font><font face=3D"tahoma,sans-serif">(I apologize in advance to anyo=
ne who might receive duplicates of this plea.)</font></font></div>
<div><font><font face=3D"tahoma,sans-serif"><br></font></font></div><div><f=
ont><font face=3D"tahoma,sans-serif">Valpo is about to embark on the exciti=
ng journey of converting our network file servers and directory structure f=
rom Novell Directory Services over to Microsoft Active Directory. =A0Has an=
yone been through this process? =A0Any words of wisdom, tips, tricks, sugge=
stions, etc?</font></font></div>
<div><font><font face=3D"tahoma,sans-serif"><br></font></font></div><div><f=
ont><font face=3D"tahoma,sans-serif">Thanks much!</font></font></div><div><=
font><font face=3D"tahoma,sans-serif">-Becky Klein<br clear=3D"all"></font>=
</font></div>
<div><font><font face=3D"tahoma,sans-serif"><br></font></font></div><div><b=
r></div>-- <br><div><font face=3D"tahoma, sans-serif"><br></font></div><fon=
t face=3D"tahoma, sans-serif"><a href=3D"http://www.google.com/calendar/emb=
ed?src=3Dbecky.klein%40valpo.edu&ctz=3DAmerica/Chicago" target=3D"_blan=
k">Becky (Belmont '97) Klein</a>, Manager of Client Services</font><div=
>
<font face=3D"tahoma, sans-serif">Chair, Salaried Concerns Committee<br></f=
ont><div><font face=3D"tahoma, sans-serif">Valparaiso University</font></di=
v><div><font face=3D"tahoma, sans-serif">Information Technology</font></div=
>
<div>
<font face=3D"tahoma, sans-serif">Phone: <a href=3D"tel:219.464.5986" value=
=3D"+12194645986" target=3D"_blank">219.464.5986</a></font></div><div><a hr=
ef=3D"http://valpo.edu" target=3D"_blank"><font face=3D"tahoma, sans-serif"=
>valpo.edu</font></a></div>
<div><font face=3D"tahoma, sans-serif"><br></font></div>
<div><font face=3D"tahoma, sans-serif"><img width=3D"96" height=3D"37"></fo=
nt><br></div></div><div><span><br></span></div><div><font face=3D"tahoma, s=
ans-serif"><i><span>Valpo has gone Google! =A0Check <a href=3D"http://valpo=
.edu/googleapps" target=3D"_blank">valpo.edu/googleapps</a></span><span>=A0=
for updates, FAQ's, and much more!</span></i></font></div>
<br>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></blockquote></div><br><br clear=3D"all"><div><br></div></div></div><sp=
an class=3D"HOEnZb"><font color=3D"#888888">-- <br>Tony Skalski<br>Systems =
Administrator<br><a href=3D"mailto:ajs@stolaf.edu" target=3D"_blank">ajs@st=
olaf.edu</a><br>
<a href=3D"tel:507-786-3227" value=3D"+15077863227" target=3D"_blank">507-7=
86-3227</a><br>St. Olaf College<br>Information and Instructional Technologi=
es<br>
1510 St. Olaf Avenue<br>Northfield, MN=A0 =A0 55057-1097<div>--------------=
---------------------------------------------------------------------------=
-----</div><div>St. Olaf IIT staff will *never* ask you for your password v=
ia email.</div>
<div><br><br></div><br>
</font></span></div><div class=3D"HOEnZb"><div class=3D"h5">
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></div></div></blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--e89a8fb1edc85e25fa04c38994cb--
