Active Directory (AD) consolidation
About
Multiple Active Directory (AD) domains exist across the University of Utah. This project focuses on consolidating these AD domains into a single, central AD (ad.utah.edu).
Why
Microsoft has recommended the consolidation of the University of Utah’s AD domains. This configuration will provide a more secure and reliable AD service. University leadership, with the support of the Strategic Information Technology Committee (SITC), has agreed to implement the recommendation.
Scope
The current scope is for all trusted and child domains, except for exemptions approved by Information Security Office (ISO). The project includes consolidating domains into the ad.utah.edu domain as an “OU” (organizational unit) container. This means that all directory objects (e.g., users, computers, groups, and permissions) in the trusted or child domain are being incorporated and fall under the central directory in a hierarchical fashion, rather than being connected and operating side by side.
Get started
The AD technical team is holding planning meetings with administrators for each trusted or child domain to be migrated into the central directory. The teams will carefully strategize and document details of the migration to ensure that users are able to function normally on a daily basis. Wherever possible, the project team is developing scripts to automate the process and mitigate potential errors.
Training
- Review the IT Knowledge Base article Active Directory (AD) naming conventions and org prefixes (login required)
FAQ
To request an exemption, domain owners can submit an IT Generic Service Request and select “UIT – ISO – IAM (Identity and Access Mgmt)” as the assignment group.
Requests must include the relevant business and technical justification. The chief information security officer has final approval.
Please submit an IT Generic Service Request and select “UIT – ISO – IAM (Identity and Access Mgmt)” as the assignment group to begin migration planning, ask a technical question, or request an exemption review.
Resources
IT Knowledge Base articles (login required):