1. Technical Services & Operations WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

2. Technical Services & Operations Proof of Concept to review setting different account lockout policies for different groups AD DS Fine-Grained Password and Account Lockout Policy (requires 2008 functional level) Current fix is using RC4 Reg-edit on managed Win7 and Windows 2008 Servers Current issues with clients ( unmanaged windows 7 and Windows 2008) AES Encryption 2 WINDOWS 2008 R2 AD / DC UPGRADE PROJECT Why Server 2008 R2?

3. Technical Services & Operations WINDOWS 2008 R2 AD / DC UPGRADE PROJECT 3

4. Technical Services & Operations WINDOWS 2008 R2 AD / DC UPGRADE PROJECT 10/4/2011 Project Dependency - Retire NT 4 domain trusts 1/12/2012 Project Dependency - Retire NSMC Domain Controllers 9/30/2011 Certify Enterprise Lab Infrastructure 10/20/2011 Update AD Schema in the Enterprise lab1 11/29/2011 Upgrade DC’s in the Enterprise lab to Windows Server 2008 R2 Functional Level - complete dependency testing in in a mockup of Production environment 12/15/2011 Complete Proof of Concept for AD/DS Finegrained Password Account Lockout Policy 4 Planning

5. Technical Services & Operations Enterprise Lab 5 WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

6. Technical Services & Operations WINDOWS 2008 R2 AD / DC UPGRADE PROJECT 6 Galen/PAS LDAP/SSL and Kerberos Authentication Log Logics Courion Password Management Service Account Management Web Services Security Lockout Policies CachePacket Sentry Dependencies in the Enterprise Lab

7. Technical Services & Operations WINDOWS 2008 R2 AD / DC UPGRADE PROJECT 10/28/2011 Production AD Schema Extension (Production Freeze) 12/2/2011 1 st DC upgraded in Production to Windows Server 2008 R2 (Production Freeze) 2/7/2012 All DCs in Production upgraded to Windows Server 2008 R2 (no Freeze), Domain remains at Windows Server 2003 Functional Level 2/17/2012 Domain at Windows Server 2008 R2 Functional Level (Production Freeze) 7 Production Implementation

8. Technical Services & Operations 8 Production Freeze  Global Desktop updates  Exchange  Authentication Changes  Password Changes WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

9. Technical Services & Operations 9 What will be the end Result?  AES will be implemented in production  Infrastructure has been updated to accommodate AD/DS fine grained password lockout policy for later implementation WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

10. Technical Services & Operations 10 What does this change impact?  Temporary Production Freezes while the upgrade is completed.  User’s of unmanaged Vista and Windows 7 devices will no longer have to make registry changes to the KDC key to ensure they do not get locked out.  No updates or changes for managed desktops.  No impact to service accounts currently in use. WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

11. Technical Services & Operations HP BL460c G6 Dual 4 core Intel E5540 2.53Ghz Processor 32 GB DDR 3 memory 2 x 300GB 10k SAS raid 1 configuration HP C-7000 Blade Enclosure WINDOWS 2008 R2 AD / DC UPGRADE PROJECT

12. Technical Services & Operations 12 Questions? WINDOWS 2008 R2 AD / DC UPGRADE PROJECT