Cornell Active Directory (AD), both PCs and Macs

Problem statement

Computers (PCs, Macs) are currently on Cornell's AD, and access is by NetID. That is not a sustainable configuration for when the computers are outside Cornell, even if will work in the short-term.

• Also, machine names are using Cornell's AD naming convention. Northwestern likely will prefer to change these names.

Next step

• Ryan to contact Northwestern with this question/ issue find out their thoughts.

Idea

• Leave machines on Cornell's Active Directory for move.
  • This retains all passwords locally, as cached credentials. Thus logging in will work indefinitely with current accounts when device no longer at Cornell.
  • Do not let machines reconnect to Cornell's AD once NetIDs expired!
• Change local Admin password (user names are: PC: ad-admin; Mac: ChemIT)
  • They tell us what they prefer as a password.
• Move machines to Northwestern. Should "just work" as they always have.
  • Won't allow the creation of any new AD-based accounts, obviously.
• Local IT, using local Admin, disengages them from AD. Optionally reattaches device to their AD.

Mac

One way: Hand-edit the uid and the gid of the accounts to match the new AD's user account.

PC

One way: ChemIT in the past has used (many years ago) a tool called Forensit.

• https://www.forensit.com/domain-migration.html

Another possibility: Microsoft's Easy Transfer tool.

Licensing

Next step

• Ryan: Closer to the move date, intends to contact Northwestern about this issue.

Group must understand licensing at Northwestern, and how it will affect them.

Microsoft

• Windows OS.
  • At Cornell, licensing through constant contact with campus license server.
• MS Office on Windows.
  • At Cornell, licensing through constant contact with campus license server.
• If Northwestern set up like Cornell (campus license server; no charge-backs), then this Microsoft software will work fine there.

MatLab

• Needed by group.
• Our license won't work off-campus.
  • A good idea: ChemIT to remove CU's license file before machines leave campus.
  • Don't VPN back to CU to get license to work, or might disable machine access to others.
• Idea: Northwestern insert their license file.

Gaussian

• Banned at Northwestern? Options?
• No role for ChemIT.

Material Studio

• Work with Paulette Clancy.
• No role for ChemIT.

Cornell file share service (SFS)

Next steps

• Ryan: To give ChemIT an account number for them to buy a 1TB drive. Ryan to determine time of purchase and migration timeline.
• ChemIT: ChemIT to buy drive when given the go-ahead from Ryan. On date decided on, ChemIT cuts access and copy contents to drive, for the group.

Contact and info from Northwestern

From: Jackie Milhans <milhans>  
Date: Tuesday, January 19, 2016 at 9:50 AM
To: "Oliver B. Habicht" <oh10>
Cc: Ryan Patrick Bisbey <rpb223>
Subject: Re: Data storage and filesharing - Dichtel group

Hi Oliver,

Thank you for the confirmation. I think all that’s left is data transfer. If you let me know your preferable method, I can make sure everything is in place on our end.

Ryan – When you get a Northwestern NetID, could you request a data storage share? http://www.it.northwestern.edu/research/user-services/storage/research-data.html. If you do not have Will’s NetID and do not yet have a chart string, let me know.

Regards,
Jackie

Idea:

• On a specified day, turn off access to SFS so no one can change files on file share anymore.
• All files copied to 1TB ($60-70) USB external hard drive.
  • Time estimate, if done on campus?
• USB external hard drive taken to Northwestern and data moved to their files storage service.
• Once confirmed all data successfully in Northwestern, then turn off Cornell's SFS file share.

Cornell-based group web site (CU Blogs)

Next steps

Ryan: Try to get a Northwestern ID and get a site started. And find out if someone there is willing to Admin group's CU blog, for export work. (request sponsored NetID)

Confirmed by Oliver: CIT can't add value, even if paid.

Contact from Northwestern

From: Matthew C Ivaliotes [lotus]
Sent: Wednesday, April 27, 2016 10:08 PM
To: Oliver B. Habicht <oh10>; Jackie Milhans <milhans>
Cc: Ryan Patrick Bisbey <rpb223>
Subject: Re: Data storage and filesharing - Dichtel group

Oliver,

I’m with Weinberg IT, and we’re also available to help. We also understand there is more website-related work as part of the group’s move. Don’t hesitate to let me know if there is anything my team can do.

Best,

--

Matthew Ivaliotes
Manager, Systems Solutions
Weinberg College of Arts and Sciences
Northwestern University
(847) 467-1544

Idea

Export group site from CU Blogs using WordPress tools made available within our CampusPress instance.

• Also pullout anything that process misses.

Import into NUBlogs (sp?) using WordPress tools made available within their CampusPress instance.

• Hand-correct anything missing from the export, if necessary.

Cornell-based CATON site (CU Blogs)

See also

• See above info in their group web site since much applies to this blog, too.

Next step

• Ryan: To follow up with Will. Perhaps get access to the GoDaddy web site to do the necessary work to close out the non-Cornell domain name ticket.

To still get done

• Finish getting non-CU-based domain name configured correctly.
  • ChemIT ticket #: INC000001551512
  • CIT ticket #: INC000001566397 2DPolymer.net => blogs/caton
  • Group will want to inform Northwestern of this need, so they are prepared for when it moves.

• Rework workflow, including no longer relying on use of Ryan's Cornell-contracted Box.com account.

Printers

• Anything to be done?
• Northwestern may want to change the settings we set. No password needed. Currently on DHCP.

Equipment disposal or reuse in Chemistry

• Anything?

Any grads staying?

Ryan reviewed list with Oliver, 3/4/16:

• Dichtel group members and where they are going.