01 · Starting point
Situation
After a new domain had been built, unresolved technical questions remained around connectivity, performance, security, policies and daily administration.
Constraints
- Changes within an already established IT environment
- Short, clearly scoped engagement
- Internal system and operating details remain confidential
02 · Responsibility
My scope of responsibility
I analysed open issues, optimised the domain and taught the internal team best practices for AD, GPOs, event logs, security and system maintenance.
- I identified and resolved open connectivity, performance and security issues.
- I optimised group policies, event monitoring and security settings of the new domain.
- I coached the system administrators directly on the relevant operating scenarios.
03 · Technical work
Documented scope of work
Key decisions
Combine problem solving with coaching on the live system. The domain was not only to be fixed in the short term, but to be administered securely by the internal team in the long run.
- I identified and resolved open connectivity, performance and security issues.
- I optimised group policies, event monitoring and security settings of the new domain.
- I coached the system administrators directly on the relevant operating scenarios.
04 · Technical context
Technology in use
Active Directory
Active Directory was part of the documented toolset in this Active Directory & Migration engagement.
Group Policy
Group Policy was part of the documented toolset in this Active Directory & Migration engagement.
Event Logs
Event Logs was part of the documented toolset in this Active Directory & Migration engagement.
Windows Security
Windows Security was part of the documented toolset in this Active Directory & Migration engagement.
05 · Factual basis
Evidence and limits
The new domain was stabilised technically and the internal team gained a more solid basis for administration.
- Role
- System Administrator
- Period
- February 2012 — March 2012
Lesson from the engagement
Lasting stabilisation combines technical correction with knowledge transfer to the people who will be responsible later.
Confidentiality note: Internal architecture and operating data of this engagement are not published.