Difference between revisions of "Active Directory/Naming Standards"

From WolfTech
Jump to navigation Jump to search
(→‎Users: Add service account documentation)
(Replacing page with '{{Active_Directory_toc}} [http://activedirectory.ncsu.edu/ou-admins/naming-conventions/ '''Migrated''']')
 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
{{Active_Directory_toc}}
 
{{Active_Directory_toc}}
−
The WOLFTECH domain is designed to be usable by any organization within NC State University. Consequently, special naming considerations are necessary to promote organization, prevent conflicts, and ease delegation.
 
  
−
Most objects within Active Directory are required to have unique names. In addition, it is important that an objects name indicate its purpose, as well as the organization it belongs to. The following naming standards were developed to help achieve these goals. Please be sure to follow these standards, as any unidentifiable or conflicting objects may be removed.
+
[http://activedirectory.ncsu.edu/ou-admins/naming-conventions/ '''Migrated''']
−
 
 
−
==Groups==
 
−
 
 
−
Active Directory requires that all groups have unique names. This is achieved by including the acronym of the department, college, or university that the group belongs to. The table below outlines the naming conventions that should be used for different types of groups on the WOLFTECH domain.
 
−
 
 
−
<table align="center" cellpadding="5" cellspacing="0">
 
−
  <tr>
 
−
    <td width="200px" valign="top"><b>Software Groups</b></td>
 
−
    <td width="400px">
 
−
*<b>Format</b>
 
−
**SW-&lt;DEPT&gt;-&lt;COMPANY&gt;-&lt;PRODUCT&gt;-&lt;VERSION&gt;-&lt;PACKAGEDATE&gt;
 
−
*<b>Examples</b>
 
−
**SW-ECE-Microsoft-Office-2003-20041104
 
−
*<b>Notes</b>
 
−
**For more information about software distribution, see [[../Software Distribution | Software Distribution]].
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top"><b>Freeware Groups</b></td>
 
−
    <td>
 
−
*<b>Format</b>
 
−
**FW-&lt;DEPT&gt;-&lt;COMPANY&gt;-&lt;PRODUCT&gt;-&lt;VERSION&gt;-&lt;PACKAGEDATE&gt;
 
−
*<b>Examples</b>
 
−
**FW-ECE-Mozilla-Firefox-1.0.2-20050325
 
−
*<b>Notes</b>
 
−
**For more information about software distribution, see [[../Software Distribution | Software Distribution]].
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top"><b>User/Computer Groups</b></td>
 
−
    <td>
 
−
*<b>Format</b>
 
−
**&lt;DEPT&gt;-&lt;NAME&gt; or &lt;DEPT&gt;-&lt;SUBOU&gt;.&lt;TYPE&gt;
 
−
*<b>Examples</b>
 
−
**ECE-ACS Users
 
−
**ECE-Teaching Labs.Desktops
 
−
*<b>Notes</b>
 
−
**For more information about software distribution, see [[../Software Distribution | Software Distribution]].
 
−
    </td>
 
−
  </tr>
 
−
</table>
 
−
 
 
−
==Group Policies==
 
−
 
 
−
Active Directory requires that all group policies have unique names. This is achieved by including the acronym of the department, college, or university that the group policy belongs to. The table below outlines the naming conventions that should be used for different types of group policies on the WOLFTECH domain.
 
−
 
 
−
<table align="center" cellpadding="5" cellspacing="0">
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Software Group Policy'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**SW-&lt;DEPT&gt;-&lt;COMPANY&gt;-&lt;PRODUCT&gt;-&lt;VERSION&gt;-&lt;PACKAGEDATE&gt;
 
−
*'''Examples'''
 
−
**SW-ECE-Microsoft-Office-2003-20041104
 
−
*'''Notes'''
 
−
**For more information about software distribution, see [[../Software Distribution | Software Distribution]].
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Freeware Group Policy'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**FW-&lt;DEPT&gt;-&lt;COMPANY&gt;-&lt;PRODUCT&gt;-&lt;VERSION&gt;-&lt;PACKAGEDATE&gt;
 
−
*'''Examples'''
 
−
**FW-ECE-Mozilla-Firefox-1.0.2-20050325
 
−
*'''Notes'''
 
−
**For more information about software distribution, see [[../Software Distribution | Software Distribution]].
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Departmental Security Policy'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;DEPT&gt;-&lt;NAME&gt;
 
−
*'''Examples'''
 
−
**ECE-Staff Policy
 
−
*'''Notes'''
 
−
**These policies are used with one departmental OU.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Multi-Departmental Security Policy'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**Managed-&lt;NAME&gt;
 
−
*'''Examples'''
 
−
**Managed-Member Server Policy
 
−
*'''Notes'''
 
−
**These policies are common baseline security policies based on Microsoft's security guides.
 
−
**These policies are managed by the WolfTech Systems staff and are updated periodically to improve security.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Domain-wide Security Policy'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**Domain-&lt;NAME&gt;
 
−
*'''Examples'''
 
−
**Domain-Local Accounts Policy
 
−
*'''Notes'''
 
−
**These policies apply to the entire domain.
 
−
    </td>
 
−
  </tr>
 
−
</table>
 
−
 
 
−
==Machines==
 
−
 
 
−
Active Directory requires that all machines have unique names. In addition, it is good network etiquette to not duplicate any other machine's name on the NCSU network. Please check [http://hostreg.ncsu.edu QIP] to ensure that the name you wish to use is not already in use on the NCSU network.
 
−
 
 
−
Rather than choosing a formula for naming machines, we've chosen thematic machine names that evoke personality, such as star constellations, athletic teams, and 15th century romantic poets. This helps administrators remember where the machine is, who uses it, and any past history. We've found that having this knowledge is indispensable and it would not be possible with formulaic names like ECE-PC-342-DANIELS-001.
 
−
 
 
−
==Organizational Units==
 
−
 
 
−
Active Directory does '''NOT''' require organizational units to have unique names. The only naming requirement for OUs is that they clearly indicate their purpose. There is, however, a default OU organization structure that is created for each new departmental OU. OU Admins are free to change, or even scrap, the default setup within their departmental OU if it does not meet their needs.
 
−
 
 
−
Above the departmental OUs, the WOLFTECH domain has a rigid OU architecture. To learn more, see OU Architecture Overview and Detailed Architecture.
 
−
 
 
−
==Users==
 
−
 
 
−
Active Directory requires that all users have unique names. This is achieved by using users UnityID (guaranteed to be unique), and in some cases, special suffixes. The table below outlines the naming conventions that should be used for different types of users on the WOLFTECH domain.
 
−
 
 
−
<table align="center" cellpadding="5" cellspacing="0">
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Normal Users (w/ UnityID)'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;UNITYID&gt;
 
−
*'''Examples'''
 
−
**jqpublic
 
−
*'''Notes'''
 
−
**The username and display name should be the user's UnityID.
 
−
**These accounts should only exist in the People OU.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Normal Users (w/o UnityID)'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;DEPT&gt;.&lt;FIRSTNAME&gt;.&lt;LASTNAME&gt;
 
−
*'''Examples'''
 
−
**ECE.John.Public
 
−
*'''Notes'''
 
−
**The username and display name should be &lt;DEPT&gt;.&lt;FIRSTNAME&gt;.&lt;LASTNAME&gt; to prevent confusion or conflicts with UnityIDs.
 
−
**These accounts should only exist in the departmental OU's Departmental Users OU.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Domain Admin'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;UNITYID&gt;.domadmin
 
−
*'''Examples'''
 
−
**jqpublic.domadmin
 
−
*'''Notes'''
 
−
**Domain Admins have administrative privileges on the entire domain and have local administrator on all domain machines (except those that manually remove Domain Administrator from the local Administrators group).
 
−
**The membership of the Domain Admins group is tightly screened by the WolfTech Director.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''OU Admin'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;UNITYID&gt;.ouadmin
 
−
*'''Examples'''
 
−
**jqpublic.ouadmin
 
−
*'''Notes'''
 
−
**OU Admins have administrative privileges over their departmental OU.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Departmental Computer Admin'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;UNITYID&gt;.admin
 
−
*'''Examples'''
 
−
**jqpublic.admin
 
−
*'''Notes'''
 
−
**Departmental Computer Admins have local Administrator privileges on all computers in their departmental OU.
 
−
**This requires that &lt;DEPT&gt;-OU Policy be defined correctly to add &lt;DEPT&gt;-Computer Admins to the local Administrators group of the machines in the OU.
 
−
**These accounts are used by departmental, and if desired,  college IT help desk staff to provide computer support.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Service Accounts'''</td>
 
−
    <td width="400px">
 
−
*'''Format'''
 
−
**&lt;DEPT&gt;.&lt;SERVICENAME&gt;.service
 
−
*'''Examples'''
 
−
**CNR.wds.service
 
−
**ECE.iis.service
 
−
*'''Notes'''
 
−
**Service accounts are used for programs and services that need a special user container to access domain resources.  They should only be used when the provided service requires separation from a valid normal or admin user account.
 
−
**These accounts should only exist in the Departmental Users/Service Accounts subOU in a departmental or college-level OU.
 
−
    </td>
 
−
  </tr>
 
−
</table>
 
−
 
 
−
==Courses==
 
−
 
 
−
To facilitate using Active Directory in lab environments, the WOLFTECH domain is automatically populated with course groups for courses in supported colleges. The groups can be used to give the appropriate students access in computer labs. Due to FERPA concerns, only Domain Administrators and Departmental OU Administrators can view the course groups and their memberships.  In addition, non-admins cannot view the memberof field of other users (they can view their own).  The following naming standards are used:
 
−
 
 
−
<table align="center" cellpadding="5" cellspacing="0">
 
−
  <tr>
 
−
    <td width="200px" valign="top">'''Departmental Students''' </td>
 
−
    <td width="400px">
 
−
*<b>Format</b>
 
−
**&lt;DEPT&gt;-Students
 
−
*<b>Examples</b>
 
−
**NCSU-Students
 
−
*<b>Notes</b>
 
−
**This group contains all students enrolled in a class under it's hierarchy.
 
−
**This includes NCSU, colleges, and departments.
 
−
    </td>
 
−
  <tr>
 
−
    <td valign="top">'''Departmental Semester Students'''</td>
 
−
    <td>
 
−
*<b>Format</b>
 
−
**CRS-&lt;DEPT&gt;-&lt;SEMM&gt;&lt;YY&gt;
 
−
*<b>Examples</b>
 
−
**ECE-Students-FALL05
 
−
*<b>Notes</b>
 
−
**This group contains all students enrolled in a class under it's hierarchy for the specified semester.
 
−
**This includes NCSU, colleges, and departments.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td valign="top">'''Course Semester'''</td>
 
−
    <td>
 
−
*<b>Format</b>
 
−
**CRS-&lt;PRE&gt;-&lt;NUM&gt;&lt;S&gt;-&lt;SEMM&gt;&lt;YY&gt;
 
−
*<b>Examples</b>
 
−
**CRS-ECE-200L-FALL05
 
−
*<b>Notes</b>
 
−
**This group contains all students enrolled in all sections of the specified class in the specified semester.
 
−
    </td>
 
−
  </tr>
 
−
  <tr>
 
−
    <td valign="top">'''Course Section Semester''' </td>
 
−
    <td>
 
−
*<b>Format</b>
 
−
**CRS-&lt;PRE&gt;-&lt;NUM&gt;&lt;S&gt;-&lt;SEC&gt;-&lt;SEMM&gt;&lt;YY&gt;
 
−
*<b>Example</b>
 
−
**CRS-ECE-200L-001-FALL05
 
−
*<b>Notes</b>
 
−
**This group contains all students enrolled in the specified section of the specified class in the specified semester.
 
−
    </td>
 
−
  </tr>
 
−
</table>
 

Latest revision as of 23:25, 18 June 2011


Migrated

Retrieved from "https://tools.wolftech.ncsu.edu/support/index.php?title=Active_Directory/Naming_Standards&oldid=10264"