Active Directory - Design and Implementation

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

Canada K-12 Education IT Infrastructure Services

Active Directory: Design


and Implementation
Reducing complexity today while preparing for the
future

The need for an ever more powerful, transparent, and tightly


integrated directory service is driven by the explosive growth of
Highlights networked computing. Because of the scale and complexity found
in most school districts, a directory service is a significant
• Increasing productivity for your IT staff component of an educational institution's computing
infrastructure.
• Simplifying directory service management and
increasing security
A properly designed and optimized directory service should
• Delivering comprehensive implementation simplify management, strengthen security and extend
services using proven methodologies interoperability. Whether you need a new design, an upgrade to
a new version or a migration from a different directory to
Microsoft's Active Directory, an updated design will lay the
infrastructural foundation for existing and future applications and
services delivered to administrative staff, teachers and students in
the district.

Moving Quickly to Prepare for New Opportunities


Migration can be an intimidating task impacting connectivity and
performance. Effectively upgrading your infrastructure can
require resources and expertise that you might not have in house.
IBM K-12 can provide you with the expertise needed for a
successful migration while allowing your IT staff to concentrate
on other business-critical tasks and projects.

If you are a two-platform district, it is important to investigate


ways to consolidate services for both platforms to minimize your
TCO. By extending Active Directory capabilities to support the
Apple OS X platform, IT departments can manage all
workstations in a single large network with common policies for
password control, user id integration, resource management and
single sign-on and gain additional productivity for your IT staff.
The K-12 Active Directory Design process is composed of six Apple Integration (Optional)
phases: To assist with the integration of Apple computers into
1: Discovery of Existing Environment - Device & Active Directory, an IBM K-12 IT architect will meet
Functionality Needs Assessment via meetings with key IT staff with you and help you build a plan that maps to your
2: Information Completion and Validation Phase organization's needs.
3: Round Table / White Board Sessions to formulate various
design scenarios with a scoring system based on pros and cons. Typical Length of Engagement: 4-8 weeks
4: Plan / Design provides more specific details about the
design requirements. Hardware specifications will be provided
Why IBM?
An Active Directory implementation for school districts is
to allow you to map them to your vendor product families.
very different than deployments for corporate or other
Analysis includes:
public sector institutions. The structure of a school
• AD Capacity Planning (server numbers, sizing, location)
district, the variety and nature of users, applications and
• Storage sizing and configuration
workstation/mobile/printing devices in schools pose
• Backup sizing and configuration
unique challenges and demand tested and proven K-12
• OU layout, Login Scripts, GPOs
design expertise. IBM K-12 AD specialists have the
• Users and Delegation
experience required to understand your environment and
5: Solution Assurance Review is conducted where several IBM
design your Active Directory configuration tailored to
Architects review the design and provide final comments.
your specific needs, efficiently and competently.
6: A comprehensive report detailing ADS Design, Forest Root
Server Design, Masters Operations Design, DNS Design, For more information
Naming Convention Scheme, Site Topology Design, Groups To learn more about IBM K-12 Active Directory Design
and Group Policy Design, Server Capacity Planning and ADS and Implementation, please contact your IBM Marketing
Backup strategy Representative.

Active Directory Implementation Services For more information on all our IBM K-12 Consulting
Now that you have your new Active Directory design, you will and Professional Services, visit:
want to implement it as soon as possible in order to continue to https://www.ibm.com/industries/education/canada-k-12
decrease your total cost of ownership (TCO). A new design
will help reduce end-user problems and allow you to provide
new functions for these same users.
Implement more quickly with less risk.
An IBM Active Directory Specialist will work with you and
your team to develop a plan and an implementation
engagement that will include the following key activities:
• Determine hardware requirements (temporary or permanent),
staging and associated timelines for the implementation of the
new design IBM Corporation
3600 Steeles Ave. East
• Decide on recommendations for Enterprise Application Markham, ON L3R 9Z7 Canada
migration with information regarding directory dependency May 2020 (revised)
of each application IBM, the IBM logo, ibm.com and IBM K-12 are trademarks or registered
• Develop a process and timeline for user migration trademarks of International Business Machines Corporation in the United
States, other countries, or both. If these and other IBM trademarked terms
• Determine impact of the migration on workstations (domain are marked on their first occurrence in this information with a trademark
name change, and joining to new domain) symbol (® or ™), these symbols indicate U.S. registered or common law
trademarks owned by IBM at the time this information was published. Such
• Validate the process for migration testing of end users trademarks may also be registered or common law trademarks in other
countries. A current list of IBM trademarks is available on the web at
• Deploy the Network Operating system “Copyright and trademark information” at ibm.com/legal/copytrade.shtml
• Implement an Active Directory Backup model that supports
your Business Security and Resiliency Plan
• Implement AD best practices for Security Tuning (NTFS,
Delegation, GPO Placement, Organization Unit Structure
and Organization Groups creation)
Please Recycle
• Transfer of basic skills on product features through hands-on
training for your staff.

You might also like