From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA [email protected].
-
Upload
darlene-french -
Category
Documents
-
view
214 -
download
1
Transcript of From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA [email protected].
![Page 2: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/2.jpg)
Outline Our W2000 Domain A new anti-virus New unknown PCs A new forest ! Summary
![Page 3: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/3.jpg)
Our W2000 domain Created in June 2000 Dapnia.saclay.cea.fr or DAPNIA 350 PCs now
250 desktop PCs 80 laptops All the new PCs Migration (reformat) of old ones
![Page 4: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/4.jpg)
An old Nice NT Domain Always 80 Nice NT PCs Stopped the 1 January 2003!!!
Upgrade to W2k (after upgrading the memory)
Replace the old ones Always 200 W95/98 PCs (not
managed) Wincenter WTS
![Page 5: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/5.jpg)
At the end of 2002… Only one W2K domain + rest of NT 4 domain
File server Some 95/98 PCs ( in the W2K domain
?) A other NT 4 domain with Exchange
5.5 Perhaps a little optimist …
![Page 6: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/6.jpg)
A new anti-virus CEA decided to buy 16000 Norton
Antivirus Corporate Edition licenses!!!!
A centralized solution (by department)
Norton has to be installed on every PC Nimda arrived in November in DAPNIA
and is always alive…
![Page 7: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/7.jpg)
Norton.com
Primary Norton server Secondary Norton server
PC PC Server Special PC
Live UpdateStandard Configuration
Special Configuration
Virus definition
Virus notification
![Page 8: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/8.jpg)
Norton CE Pbs Only one configuration by server
Dapnia: one server with blocked configuration
One server with free configuration Norton for Mac is not centralized Norton client on a W2000 server:
if connected via terminal services, pbs Norton client doesn’t work on WTS:
must install Norton Server!!!
![Page 9: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/9.jpg)
Norton CE: Summary In place since 1 month Already 450 clients 15 PCs attacked by day (Nimda via
network shared or Js.Exception.Exploit via IE…)
a good way to verify the shares without permissions (W9x) or bad permissions
![Page 10: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/10.jpg)
The new PCs During the last 5 years
We (DAPNIA) choose our PCs Only Dell
Latitude/Optiplex/Workstation Reinstalling every PC via Floppy disk
(Nice NT4 or W2k) A very homogenous park
But…
![Page 11: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/11.jpg)
CEA has decided… A CEA command every 6 months 5 different sorts of PCs
Light portables Normal portables Desktop PCs « Physics » PCs Special PCs
![Page 12: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/12.jpg)
The new PCs… 10 <> sorts of PCs by year The first command
CEA: 1300 PCs DAPNIA: 150 PCs
Must arrive in April/May (?) Can we reinstall them via floppy
disk? How can we manage 150 PCs in a
short time?
![Page 13: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/13.jpg)
A new forest… Yesterday, the DAPNIA Today, the DSM Tomorrow, the CEA
A CEA domain A CEA tree A DSM forest + a CEA forest
![Page 14: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/14.jpg)
Yesterday DAPNIA
700 Persons 700 PCs One W2K domain/tree/forest
dapnia.saclay.cea.fr One NT 4 domain declining 2 Windows system administrators
![Page 15: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/15.jpg)
Today (since February 2002) DSM: Direction des Sciences de la
Matière (Saclay) DAPNIA (700 persons) DRECAM
600 persons 600 PCs 2 NT 4 domains 2 Windows system administrators
Must be managed by the same team with the same way
![Page 16: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/16.jpg)
Tomorrow, (1 January 2003) CEA civil
7000 persons 7000 PCs 40 (?) NT 4 independent domains No W2k domain (but DAPNIA)
CEA wants to create a CEA forest
![Page 17: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/17.jpg)
One CEA Domain
DAPNIAW2k
DRECAMNT4
CEAW2k
…
CEA
DSM D..
drecamdapnia
Migration via ADMT
![Page 18: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/18.jpg)
One Tree
DAPNIAW2k
DRECAMNT4
CEA
DSM
dapnia
Migration via ADMT
drecam
![Page 19: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/19.jpg)
2 Forests
DAPNIAW2k
DRECAMNT4
CEA
DSM
dapnia
Migration via ADMT
drecam
![Page 20: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/20.jpg)
2 Forests: 2nd Solution
DAPNIAW2k
DAPNIA.net
Upgrade to .net
Rename
DSM (.net)DRECAM
NT4 Migration via ADMT Drecam
![Page 21: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/21.jpg)
The choice Not only a technical solution but a
political solution 2 forests is the best for the security One domain is the Microsoft solution Decision in September max. Perhaps to early to Windows.Net
![Page 22: From one forest to another one ? Joël Surget CEA/Saclay DSM/DAPNIA Surget@cea.fr.](https://reader035.fdocuments.us/reader035/viewer/2022070413/5697bfa51a28abf838c97d09/html5/thumbnails/22.jpg)
Summary We have to migrate the most as
possible to the W2k domain Prepare to migrate to a new forest. For the end-user,
DAPDIVNT4 domain
Nice NT Client
…2000
DAPNIAW2k domainW2k Client
2001/2
Name ???New W2k domain
W2k Client
2003…