Ensure overall security and integrity of their managed OU hierarchy
Use the OU admin account only for actions that require the privilege level of this account
Monitoring changes to OU hierarchy to ensure unauthorized changes do not occur
Delegation of authority to others for appropriate object administration in their OU hierarchy
Account management
Creation/deletion/management of objects, i.e. local user accounts, groups, workstations, servers, printers, etc. in their OU hierarchy
Regularly perform housekeeping duties to keep their OU hierarchy clear of stale, unused, expired, and other no longer needed objects
Process requests for access control authorized by data owner
Process requests for group drive mappings via login script
Create new computer accounts and join to directory services
The OU administrator will designate which administrators have "account operator" access to the Windows user accounts for users in their department.
These account operators will have privileges that let them make changes to a subset of attributes for the accounts in their OU
This subset of attributes includes Windows-centric information like home directory location, profile location, terminal server settings and other kinds of user data that isn't replicated from the root of the LBL domain
Group Policy Object (GPO) creation, troubleshooting, and management
Publishing resource objects from their OU hierarchy in the Active Directory as applicable
Manage Group Policy Object (GPO) links within their OU hierarchy
Coordinate activities of Member Server owners
Work with server and/or data owners to set up permissions
Policy Compliance
Comply with LBL AD policies and standards as defined on the AD Web Site
Apply LBL standard naming conventions to objects in their OU hierarchy
Contact information.
Each top-level OU must contain contact information for the department to facilitate contacting OU administrators
When OU manager changes, notify the Enterprise Administrator
Verify new software deployments and GPO policies work by testing them in a test domain as appropriate.
Communication and coordination
Work collectively with the domain admins and with other OU administrators
Keep informed about domain-wide changes (e.g. attend periodic meetings of the OU administrators or participate in mail lists)
Provide the following to the domain admins, when suspecting a desktop related problem stems from a change to the Active Directory or DC configuration:
Event description
Logon name of affected user
Name of affected computer
Time of event
Relevant warnings and errors in event logs
Relevant warnings or errors displayed on screen
Years of Exp:
-----------------
- Years
Employment Type:
--------------------
Permanent
Shift Timings:
------------------
* Shift based support for time zone coverage.
Beware of fraud agents! do not pay money to get a job
MNCJobz.com will not be responsible for any payment made to a third-party. All Terms of Use are applicable.