The upkeep of Active Directory

[MB]

I would like to get a general feel on where the houskeeping of the Active Directory specifically the removal of disabled assets falls under. My personal feeling is as part of Change and Config rather than Release Management but wondered if this was in fact the standard rhater than just my personal opinion.

[UKVIKING]

it depends

What does your documentation say or not say about objects in Active Directory

If you have processes for adding and remove users when they join and leave the company, then technically you have a standard change

same applies to new laptops desktops etc

but ITIL does not care whether AD is included in any process. YOU Should decide whether the application and the supporting process should be

IT DEPENDS ON WHAT YOU DESIRE TO CONTROL / NEED
_________________
John Hardesty
ITSM Manager's Certificate (Red Badge)

Change Management is POWER & CONTROL. /....evil laughter

[MB]

[quote="MB"]I would like to get a general feel on where the houskeeping of the Active Directory specifically the removal of disabled assets falls under. My personal feeling is as part of Change and Config rather than Release Management but wondered if this was in fact the standard than just my personal opinion.[/quote]

Thank you for the response.

There are processes in place for JML, additional/replacement & BER assets. However the issue regarding disabled assets has not been identified previously.

The Release team carried out an initial project to remove assets showing as disabled in Active Directory as we report on objects (PCS) within OUs for testing and general release of software upgrades. We needed to have a true and accurate reflection of the estate and so completed the 1st wave of investigation and housekeeping.

From the project, we have found that:
1) Assets are continually moved around within OUs
2) More assets have been disabled with no clear indication as to why
3) Whether the processes in place for adding new and removing old assets are being followed as agreed.

We cannot directly monitor AD as this is carried out by a 3rd party service provider. We have requested a weekly report to establish who is moving assets around & to ascertain why assets are being moved.

[UKVIKING]

This is NOT an ITIL issue

This is A 3RD PARTY VENDOR ISSUE

as you have stated some one else is in control of your AD

It is not your change, release or config issue . It is theirs

In addition, what are the objects

Servers ? desktops ? etc

This is also a MICROSOFT ISSUE not an ITIL ISSUE

This has to do with how well or poorly AD has been configured for you by your service provider
_________________
John Hardesty
ITSM Manager's Certificate (Red Badge)

Change Management is POWER & CONTROL. /....evil laughter

[UrgentJensen]

Agreed Viking, about as close to ITIL as this gets is the idea of getting your underpinning contracts in place before looking at your OLAs and SLAs.

MB - Sort out your service agreement first.

Cheers,

UJ
_________________
Did I just say that out loud?

(Beige badge)

[MB]