from one forest to another one n.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
From one forest to another one ? PowerPoint Presentation
Download Presentation
From one forest to another one ?

Loading in 2 Seconds...

play fullscreen
1 / 22

From one forest to another one ? - PowerPoint PPT Presentation


  • 76 Views
  • Uploaded on

From one forest to another one ?. Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr. Outline. Our W2000 Domain A new anti-virus New unknown PCs A new forest ! Summary. Our W2000 domain. Created in June 2000 Dapnia.saclay.cea.fr or DAPNIA 350 PCs now 250 desktop PCs 80 laptops

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'From one forest to another one ?' - lavada


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
from one forest to another one

From one forest to another one ?

Joël Surget

CEA/Saclay

DSM/DAPNIA

Surget@cea.fr

outline
Outline
  • Our W2000 Domain
  • A new anti-virus
  • New unknown PCs
  • A new forest !
  • Summary
our w2000 domain
Our W2000 domain
  • Created in June 2000
  • Dapnia.saclay.cea.fr or DAPNIA
  • 350 PCs now
    • 250 desktop PCs
    • 80 laptops
    • All the new PCs
    • Migration (reformat) of old ones
an old nice nt domain
An old Nice NT Domain
  • Always 80 Nice NT PCs
  • Stopped the 1 January 2003!!!
    • Upgrade to W2k (after upgrading the memory)
    • Replace the old ones
  • Always 200 W95/98 PCs (not managed)
  • Wincenter  WTS
at the end of 2002
At the end of 2002…
  • Only one W2K domain
  • + rest of NT 4 domain
    • File server
    • Some 95/98 PCs ( in the W2K domain ?)
  • A other NT 4 domain with Exchange 5.5
  • Perhaps a little optimist …
a new anti virus
A new anti-virus
  • CEA decided to buy 16000 Norton Antivirus Corporate Edition licenses!!!!
  • A centralized solution (by department)
  • Norton has to be installed on every PC
  • Nimda arrived in November in DAPNIA and is always alive…
slide7

Live Update

Norton.com

Standard Configuration

Special Configuration

Virus definition

Virus notification

Primary Norton server

Secondary Norton server

Special PC

Server

PC

PC

norton ce pbs
Norton CE Pbs
  • Only one configuration by server
    • Dapnia: one server with blocked configuration
    • One server with free configuration
  • Norton for Mac is not centralized
  • Norton client on a W2000 server:if connected via terminal services, pbs
  • Norton client doesn’t work on WTS: must install Norton Server!!!
norton ce summary
Norton CE: Summary
  • In place since 1 month
  • Already 450 clients
  • 15 PCs attacked by day (Nimda via network shared or Js.Exception.Exploit via IE…)
  • a good way to verify the shares without permissions (W9x) or bad permissions
the new pcs
The new PCs
  • During the last 5 years
    • We (DAPNIA) choose our PCs
    • Only Dell Latitude/Optiplex/Workstation
    • Reinstalling every PC via Floppy disk (Nice NT4 or W2k)
    • A very homogenous park
  • But…
cea has decided
CEA has decided…
  • A CEA command every 6 months
  • 5 different sorts of PCs
    • Light portables
    • Normal portables
    • Desktop PCs
    • « Physics » PCs
    • Special PCs
the new pcs1
The new PCs…
  • 10 <> sorts of PCs by year
  • The first command
    • CEA: 1300 PCs
      • DAPNIA: 150 PCs
    • Must arrive in April/May (?)
  • Can we reinstall them via floppy disk?
  • How can we manage 150 PCs in a short time?
a new forest
A new forest…
  • Yesterday, the DAPNIA
  • Today, the DSM
  • Tomorrow, the CEA
    • A CEA domain
    • A CEA tree
    • A DSM forest + a CEA forest
yesterday
Yesterday
  • DAPNIA
    • 700 Persons
    • 700 PCs
    • One W2K domain/tree/forestdapnia.saclay.cea.fr
    • One NT 4 domain declining
    • 2 Windows system administrators
today since february 2002
Today (since February 2002)
  • DSM: Direction des Sciences de la Matière (Saclay)
    • DAPNIA (700 persons)
    • DRECAM
      • 600 persons
      • 600 PCs
      • 2 NT 4 domains
      • 2 Windows system administrators

Must be managed by the same team with the same way

tomorrow 1 january 2003
Tomorrow, (1 January 2003)
  • CEA civil
    • 7000 persons
    • 7000 PCs
    • 40 (?) NT 4 independent domains
    • No W2k domain (but DAPNIA)
  • CEA wants to create a CEA forest
one cea domain

DAPNIA

W2k

CEA

DRECAM

NT4

DSM

D..

dapnia

drecam

Migration via ADMT

One CEA Domain

CEA

W2k

one tree

CEA

DAPNIA

W2k

DSM

DRECAM

NT4

dapnia

drecam

Migration via ADMT

One Tree
2 forest s

CEA

DSM

dapnia

drecam

Migration via ADMT

2 Forests

DAPNIA

W2k

DRECAM

NT4

2 forests 2 nd solution

DAPNIA

.net

Upgrade to .net

Rename

DRECAM

NT4

DSM (.net)

Migration via ADMT

Drecam

2 Forests: 2nd Solution

DAPNIA

W2k

the choice
The choice
  • Not only a technical solution but a political solution
  • 2 forests is the best for the security
  • One domain is the Microsoft solution
  • Decision in September max.
  • Perhaps to early to Windows.Net
summary

Name ???

New W2k domain

W2k Client

DAPDIV

NT4 domain

Nice NT Client

DAPNIA

W2k domain

W2k Client

…2000

2001/2

2003…

Summary
  • We have to migrate the most as possible to the W2k domain
  • Prepare to migrate to a new forest.
  • For the end-user,