Enterprise Directory Services
Enterprise Directory Services, currently based on MS Active Directory, provides a centralized authoritative repository of information about network-based resources (such as computers, printers, applications, and file shares). It simplifies the management of these resources while controlling who can access them.
Agencies integrated into the Enterprise Directory Service can take advantage of single/simplified sign-on by accessing all network-based resources using their NCID username and password.
Agencies can also take advantage of the Enterprise Shared LDAP environment. This environment allows applications anywhere in the state to securely authenticate any user who has an NCID account. This provides a simple methodology for applications to securely authenticate users without additional infrastructure costs or complexity.
The Enterprise Directory Services Team assists customers in migrating to the Enterprise Directory by utilizing a proven repeatable process, highly rated migrations tools and a staff that has over 40 years of combined experience. This model saves the customer both time and money as they move from other platforms into the Enterprise Directory.
The core support of the Enterprise Directory is managed by the Enterprise Directory Services team. Customers maintain and control their domain as well as, maintain the support function of applications, data, printers, servers and computers.
The Enterprise Directory Service (EAD) is a core foundation service which enables state agencies to reduce their infrastructure and operating costs by utilizing a common, standardized, and secure directory.
With Enterprise Active Directory, customers will realize the following benefits:
- Environment reviews to include both business and technical drivers
- Robust and transparent communication/collaboration between EAD group and customer
- Best practice standards and guidelines for management of EAD
- Pro-active support, maintenance, and planning for the Enterprise Directory
- Daily EAD environment health checks
- 24x7x365 technical support for directory related issues
- Customers use their NCID account and password to logon to EAD. User provisioning, de-provisioning and password support are handled through the NCID interface.
- Simplified account lifecycle management due to the EAD/NCID integration
- Simplified Directory management with Enterprise tools
- Enterprise automated features reduce the administration work for customers, while improving security
- Office 365, Hosted Virtual Desktop and other exciting services are integrated with the Enterprise Directory, making deployment to the local customers easier and quicker
- The Enterprise has an application integration interface with multi-layers of redundancy. Customers can integrate their applications to the Enterprise Directory without migration. All NCID accounts are available for authentication through the application interface.
Enterprise Active Directory Service Responsibilities
In the Enterprise Directory environment and other directories the team supports, they will be solely responsible for the maintenance and control of the Active Directory infrastructure, specifically:
- Overall Forest and Domain architecture, design and maintenance
- Domain Controller Implementation, Security and Management; Schema Management; Group Policies; Replication Topology; Sites and Services; Trust Relationships; DNS; OU Design and Management; Delegation of Rights; Built-in Group Management; Forest and Domain Security; Directory Based Account Management
- The creation and subsequent applying of customer specific GPO's is done collaboratively between the EAD team and the customer. The customer will be responsible for either the creation of agency specific policies or working with the EAD team to assist in developing agency specific policies. The EAD team is solely responsible for applying all customer GPO's in the Enterprise environment.
- Active Directory System State backups and restores
- Participation in Disaster Recovery and Business Recovery Services as requested by agencies
Customer support staff will have the following delegated responsibilities:
- Administrative control and responsibility for application servers and associated data
- Administrative control and responsibility for file/print servers and associated data
- Administrative control and responsibility for client machines and devices
- Responsible for backup and restore of application and file/print server data
- Responsible for support and maintenance of all non-Windows products that are connected to the Enterprise Directory
- Responsible for the definition, testing and approval of agency-specific GPO's
- User administration such as creation of new accounts, removal of existing accounts and password management is done through NCID and not directly performed in the directory. The customer is responsible for managing these activities through the NCID management portal.
- Customer support staff will have delegated administrative rights within the Enterprise Directory portal for group management as well as the ability to add/remove devices, such as workstations and servers
How Do We Charge?
To take advantage of our service, you may contact our Service Desk at 919-754-6000 or 1-800-722-3946, or email ITS.firstname.lastname@example.org to request consultation from the EAD team. A member of the team will contact you to discuss your needs.