[27801] in resnet
Re: converting from NDS to AD
daemon@ATHENA.MIT.EDU (Ryan Dorman)
Sun Jul 1 17:08:49 2012
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_D9D0C3D6A031FD41B81047D41FDC129D0BD11A8C5EDCEX07bbbbnet_"
MIME-Version: 1.0
Message-ID: <D9D0C3D6A031FD41B81047D41FDC129D0BD11A8C5E@DCEX07.bbbb.net>
Date: Sun, 1 Jul 2012 17:07:06 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Ryan Dorman <Ryan.Dorman@blackboard.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <CAEPWjzssr=yG+28SZ4192MZVEODmQN_9t=L1OKrg7fGNGjB5rQ@mail.gmail.com>
--_000_D9D0C3D6A031FD41B81047D41FDC129D0BD11A8C5EDCEX07bbbbnet_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Big ++Marc on that method of share permissions... when we finally adopted t=
hat here it cut down on a lot of help desk confusion of searching 15 dialog=
boxes to find why User A cannot connect to File Z.
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Doughty, =
Marc
Sent: Thursday, June 28, 2012 11:00 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: converting from NDS to AD
We did a similar thing at Brown. It was VERY labor-intensive, but there was=
really no way to get around that.
We did start with printing, six months ahead of files, just to get a grip o=
n what things would be like department-by-department.
Also, one thing we -didn't- do that I was a major proponent of was to SIMPL=
IFY the share layout. These days, you could have one share in your organiza=
tion called 'files' (or two: 'departments' and 'users'), and just pile more=
and more storage into it. Use 'Everyone:Full' share permissions (makes Mac=
+ Linux access much easier, makes restoring and DR simpler, and I can argu=
e that it's just as secure) and rely on NTFS for your access controls. Mode=
rn storage arrays can be added-to online, NTFS volumes can be expanded. NTF=
S can handle petabytes of data and billions of files. There's no need to sp=
lit things up between many shares and servers anymore, it's making accommod=
ations for limitations that no longer exist.
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way vessel=
."
On Tue, Jun 26, 2012 at 4:54 PM, Tony Skalski <ajs@stolaf.edu<mailto:ajs@st=
olaf.edu>> wrote:
Hi Becky,
We did this over the course of a year; we have about 2,000 machines and app=
rox. 3,800 users. The first summer we migrated our storage to a new SAN (Ne=
tApp). To do this we had a machine run robocopy every night to sync from th=
e old Novell storage to the new shares. On the day of the migration, we ran=
robocopy to sync the old with the new and then shutdown the old and update=
d our login scripts to point to the new shares (using "net use" instead of =
"map", of course). The final sync and cutover didn't take more than an hour=
or two.
We ran like this for about a year, and support folks were able to migrate m=
achines to AD as they saw fit. We had a deadline the following summer, at w=
hich time all clients should have been migrated, and the Novell servers wer=
e decommissioned. I wrote a script to remove the Novell software (client, z=
enworks, iPrint), do some housekeeping (checking machine name) and then joi=
ning to the domain. We also re-pointed the users new domain account to thei=
r existing (DLU-created) profile directory. The entire migration process to=
ok around 30 minutes per machine, and of course, all lab machines were reim=
aged using a new imaging process.
We had a Novell server in VMWare, and took a snapshot of that and powered i=
t off for safekeeping. This was mostly done to facilitate restores from bac=
kup, which fortunately (cue wood knocking) we have not had to do.
Feel free to contact me off list if you have any other questions. Good luck=
!
ajs
On Tue, Jun 26, 2012 at 2:16 PM, Becky Klein <becky.klein@valpo.edu<mailto:=
becky.klein@valpo.edu>> wrote:
Hi everyone,
(I apologize in advance to anyone who might receive duplicates of this plea=
.)
Valpo is about to embark on the exciting journey of converting our network =
file servers and directory structure from Novell Directory Services over to=
Microsoft Active Directory. Has anyone been through this process? Any wo=
rds of wisdom, tips, tricks, suggestions, etc?
Thanks much!
-Becky Klein
--
Becky (Belmont '97) Klein<http://www.google.com/calendar/embed?src=3Dbecky.=
klein%40valpo.edu&ctz=3DAmerica/Chicago>, Manager of Client Services
Chair, Salaried Concerns Committee
Valparaiso University
Information Technology
Phone: 219.464.5986<tel:219.464.5986>
valpo.edu<http://valpo.edu>
Valpo has gone Google! Check valpo.edu/googleapps<http://valpo.edu/googlea=
pps> for updates, FAQ's, and much more!
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
--
Tony Skalski
Systems Administrator
ajs@stolaf.edu<mailto:ajs@stolaf.edu>
507-786-3227<tel:507-786-3227>
St. Olaf College
Information and Instructional Technologies
1510 St. Olaf Avenue
Northfield, MN 55057-1097
---------------------------------------------------------------------------=
-------------------
St. Olaf IIT staff will *never* ask you for your password via email.
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
This email and any attachments may contain confidential and proprietary inf=
ormation of Blackboard that is for the sole use of the intended recipient. =
If you are not the intended recipient, disclosure, copying, re-distribution=
or other use of any of this information is strictly prohibited. Please imm=
ediately notify the sender and delete this transmission if you received thi=
s email in error.
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_D9D0C3D6A031FD41B81047D41FDC129D0BD11A8C5EDCEX07bbbbnet_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D">Big ++Marc on tha=
t method of share permissions… when we finally adopted that here it c=
ut down on a lot of help desk confusion of searching 15 dialog boxes to
find why User A cannot connect to File Z.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><a name=3D"_MailEndCompose"><span style=3D"font-size=
:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D"><o:p> </o:p></span></a></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:"Tahoma","sans-serif""> Resnet F=
orum [mailto:RESNET-L@LISTSERV.ND.EDU]
<b>On Behalf Of </b>Doughty, Marc<br>
<b>Sent:</b> Thursday, June 28, 2012 11:00 AM<br>
<b>To:</b> RESNET-L@LISTSERV.ND.EDU<br>
<b>Subject:</b> Re: converting from NDS to AD<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">We did a similar thing at Brown. It was VERY labor-i=
ntensive, but there was really no way to get around that.<br>
<br>
We did start with printing, six months ahead of files, just to get a grip o=
n what things would be like department-by-department.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Also, one thing we -d=
idn't- do that I was a major proponent of was to SIMPLIFY the share layout.=
These days, you could have
<b>one</b> <b>share</b> in your organization called 'files' (or two: 'depar=
tments' and 'users'), and just pile more and more storage into it. Use 'Eve=
ryone:Full'
<i>share</i> permissions (makes Mac + Linux access much easier, makes r=
estoring and DR simpler, and I can argue that it's just as secure) and rely=
on NTFS for your access controls. Modern storage arrays can be added-to on=
line, NTFS volumes can be expanded.
NTFS can handle petabytes of data and billions of files. There's no need t=
o split things up between many shares and servers anymore, it's making =
;accommodations for limitations that no longer exist.<br clear=3D"all"=
>
<br>
- Marc Doughty<br>
"If you aren't sure who is the give-way vessel, you are the give-way v=
essel."<br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">On Tue, Jun 26, 2012 at 4:54 PM, Tony Skalski <<a=
href=3D"mailto:ajs@stolaf.edu" target=3D"_blank">ajs@stolaf.edu</a>> wr=
ote:<o:p></o:p></p>
<p class=3D"MsoNormal">Hi Becky,<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">We did this over the course of a year; we have about=
2,000 machines and approx. 3,800 users. The first summer we migrated our s=
torage to a new SAN (NetApp). To do this we had a machine run robocopy ever=
y night to sync from the old Novell
storage to the new shares. On the day of the migration, we ran robocopy to=
sync the old with the new and then shutdown the old and updated our login =
scripts to point to the new shares (using "net use" instead of &q=
uot;map", of course). The final sync and cutover
didn't take more than an hour or two.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">We ran like this for about a year, and support folks=
were able to migrate machines to AD as they saw fit. We had a deadline the=
following summer, at which time all clients should have been migrated, and=
the Novell servers were decommissioned.
I wrote a script to remove the Novell software (client, zenworks, iPrint),=
do some housekeeping (checking machine name) and then joining to the domai=
n. We also re-pointed the users new domain account to their existing (DLU-c=
reated) profile directory. The entire
migration process took around 30 minutes per machine, and of course, all l=
ab machines were reimaged using a new imaging process.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">We had a Novell server in VMWare, and took a snapsho=
t of that and powered it off for safekeeping. This was mostly done to facil=
itate restores from backup, which fortunately (cue wood knocking) we have n=
ot had to do.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Feel free to contact me off list if you have any oth=
er questions. Good luck!<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">ajs<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class=3D"MsoNormal">On Tue, Jun 26, 2012 at 2:16 PM, Becky Klein <<a =
href=3D"mailto:becky.klein@valpo.edu" target=3D"_blank">becky.klein@valpo.e=
du</a>> wrote:<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Hi everyone,</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">(I apologize in advance to anyone who might receive dupli=
cates of this plea.)</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Valpo is about to embark on the exciting journey of conve=
rting our network file servers and directory structure from Novell Director=
y Services over to Microsoft Active Directory. Has anyone
been through this process? Any words of wisdom, tips, tricks, sugges=
tions, etc?</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Thanks much!</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">-Becky Klein<br clear=3D"all">
</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<p class=3D"MsoNormal">-- <o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif""><a href=3D"http://www.google.com/calendar/embed?src=3Dbec=
ky.klein%40valpo.edu&ctz=3DAmerica/Chicago" target=3D"_blank">Becky (Be=
lmont '97) Klein</a>, Manager of Client Services</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Chair, Salaried Concerns Committee</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Valparaiso University</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Information Technology</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Tahoma","=
sans-serif"">Phone: <a href=3D"tel:219.464.5986" target=3D"_blank">
219.464.5986</a></span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><a href=3D"http://valpo.edu" target=3D"_blank"><span=
style=3D"font-family:"Tahoma","sans-serif"">valpo.edu<=
/span></a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p></o:p></p>
</div>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><i><span style=3D"font-family:"Tahoma",&qu=
ot;sans-serif"">Valpo has gone Google! Check
<a href=3D"http://valpo.edu/googleapps" target=3D"_blank">valpo.edu/googlea=
pps</a> for updates, FAQ's, and much more!</span></i><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br clear=3D"all">
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
<p class=3D"MsoNormal"><span class=3D"hoenzb"><span style=3D"color:#888888"=
>-- </span></span><span style=3D"color:#888888"><br>
<span class=3D"hoenzb">Tony Skalski</span><br>
<span class=3D"hoenzb">Systems Administrator</span><br>
<span class=3D"hoenzb"><a href=3D"mailto:ajs@stolaf.edu" target=3D"_blank">=
ajs@stolaf.edu</a></span><br>
<span class=3D"hoenzb"><a href=3D"tel:507-786-3227" target=3D"_blank">507-7=
86-3227</a></span><br>
<span class=3D"hoenzb">St. Olaf College</span><br>
<span class=3D"hoenzb">Information and Instructional Technologies</span><br=
>
<span class=3D"hoenzb">1510 St. Olaf Avenue</span><br>
<span class=3D"hoenzb">Northfield, MN 55057-1097<o:p></o:p></s=
pan></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"color:#888888">----------------------=
------------------------------------------------------------------------</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"color:#888888">St. Olaf IIT staff wil=
l *never* ask you for your password via email.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"color:=
#888888"><o:p> </o:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
</div>
<br>
<font face=3D"Arial" color=3D"Blue" size=3D"2">This email and any attachmen=
ts may contain confidential and proprietary information of Blackboard that =
is for the sole use of the intended recipient. If you are not the intended =
recipient, disclosure, copying, re-distribution
or other use of any of this information is strictly prohibited. Please imm=
ediately notify the sender and delete this transmission if you received thi=
s email in error.<br>
</font>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_D9D0C3D6A031FD41B81047D41FDC129D0BD11A8C5EDCEX07bbbbnet_--
