Search:

Windows Enterprise Domain
IT Administrator Support


Announcements

Support Resources
  • Solution Center, 195 Durham Center, 515.294.4000, solution@iastate.edu, fax 515.294.3702 General OU management help, ISU NetID username/passwords help.
  • Operations, 95 Durham Center, 515.294.2256, General system trouble reporting for distributed campus systems (including the Windows Enterprise domain) and lab trouble reporting.
  • OU Administrator Support TechNotes provides important information for OU administrators.

Windows Enterprise Domain Design

The core features of the Windows Enterprise design implement "single sign-on" (using ISU NetIDs), delegation of OU administration (for departmental IT admins) and central authentication and global catalog lookup. Documents on the design of the Windows Enterprise Domain Active Directory environment are available in the Windows Enterprise Design area.

Windows Enterprise Status and Participation

Windows Service Packs

Current service packs for Windows operating systems are:

  • Windows Server 2008 R2 - Service Pack 1
  • Windows Server 2008 - Service Pack 2
  • Windows Server 2003 - Service Pack 2
  • Windows XP - Service Pack 3
  • Windows Vista - Service Pack 2
  • Windows 7 - Service Pack 1

Windows Security

Keeping your Windows Client and Server systems secure from intrusion, viruses, and other compromise is critical. The core set of things you should be doing on EVERY Windows system you manage is available in the Windows System Security area.

If you do not follow recommended security guidelines, your system will eventually become infected. When this happens, the network traffic from the infection will soon be detected and traced back to your system. Internet access for your system will then be blocked at the campus border. When this happens you will see the "Red Screen of Internet Death" until you disinfect your system and request it to be un-blocked.

OU Administration

If you are an IT Administrator for a college, department, or major operating unit at Iowa State University you can request and manage your own "OU" ("Organizational Unit"). For a list of current OUs see Current Departmental Organizational Units.

Joining your Windows systems to an OU in the Windows Enterprise Domain ("iastate.edu") means the bulk of the "user creation/deletion" chores are done for you. ISU NetIDs (which every faculty, staff, and student are registered for) are used for system login and resource access. However, you still have full control of your OU to add and remove systems, create "departmental exception" user accounts, and create and manage groups and group policy for your area. Users in the Windows Enterprise Domain appear in the "global address list" for the Windows Enterprise Exchange organization (see "Exchange Implementation" below).

An OU Manager's Handbook is available to get you started. For complete information on creating and managing a departmental OU (including some good tools and tips not available in the OU Manager's Handbook) visit the OU Administrator Support area.

Exchange Implementation/Administration

Exchange 2007 is integrated with Windows Enterprise design in that they share the same directory ("Active Directory") to store information about users (and their mailboxes). Exchange 2007 requires an enterprise "Exchange organization" that has been designed and implemented (much like the Windows Enterprise Active Directory system was designed and implemented). The Office of Academic Information Technologies and Administrative Technology Services are coordinating on these important Windows Enterprise functions. A good deal of information is available at ITS's Exchange 2000 Administration web page.

Licensing (CALs)

Many licensing requirements for departmental use of Windows systems have been covered with the signing of the Microsoft Campus Agreement in August of 2001. Some Windows software (including Windows CLIENT operating systems and "Microsoft Office") are covered under the Campus Agreement. Windows SERVER operating systems are NOT covered by the MCA. "Client Access Licenses" (CALs) MAY be covered for your use (depending on what you are doing). Refer to the ISU Microsoft Campus Agreement web page for information on the current Microsoft Campus Agreement.

Windows Vista and Windows 7 Activation (KMS and MAK Keys)

Windows Vista and Windows 7 require software activation to continue to function. Information on Windows software activation can be found on the ITS web page Microsoft Vista at Iowa State University. In general, systems that are not permanently "on campus" (or cannot connect regularly and reliably via VPN) should never use the KMS key-activation method. You should always get a permanent "MAK" key for these systems Laptops are always "prime candidates" for "MAK" keys. Another case is "isolated labs" or instrumentation systems that have no network connections.

Windows Software

A variety of software products are recommended and supported by ITS. Several software products are site-licensed and are provided at no cost for users with valid ISU NetIDs. See the Windows Software area for more information.

Informational Meetings and Mailing Lists
  • Windows Administrators meetings are held once a month by ITS and are open to any departmental Windows manager. A mailing list is also maintained for announcements, discussion, etc. Past meeting notes are available.

  • Windows Exchange Administrators meetings are only held "as needed" by ITS and are open to departmental IT admins. A mailing list is also maintained for announcements, discussion, etc. Past meeting notes are available.

Last updated May 10, 2012