Re: Domain users -- PCTECH

Hardware: Either a Dell Server with A Cybernetics SAN (through the consultant), or an IBM server with a Fujitsu SAN (CDW). I'm guessing it's going to be the former. Will know in 2 days or so.

Thanks for all the advice.

--
Jeff Crosby
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of my company. Unless I say so.

-----Original Message-----
From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx] On
Behalf Of Lukas Beeler
Sent: Monday, June 01, 2009 3:02 PM
To: PC Technical Discussion for iSeries Users
Subject: Re: [PCTECH] Domain users

On Mon, Jun 1, 2009 at 20:16, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:

A windows consultant is going to be setting us up as a domain instead of a
workgroup. He's asked some questions I don't know how to answer. Since
he's not really a System i guy, he won't know.

A very good idea. I remember we had a thread about your configuration
a few weeks back, on what kind of hardware and software did you
settle?

1) He wants a list of users along with passwords. Since the System i is on
the LAN, does every System i user need to be set up in the domain?
Including IBM supplied ones? How about ones I created that have no password
because they're not used for signon?

No, you only need a Windows account per physical user. Usernames on
the i and on Windows don't even need to match, even if you're planning
for SSO later they don't need to. However, it makes it easier for
without SSO and access to Netserver shares.

Basically, just talk to the guy what he wants to achieve - Windows
guys don't bite ;)

2) He asked for password rules. Do I regurgitate the System i rules and he
duplicates them? I've heard of something called single sign-on, should we
use this? Not a good idea at setup time? I can see the domain and the
System I each trying to enforce rules making it tough for users to keep

them

in sync.

Password rules - well, making them the same is a very sensible idea.
SSO is good, but do it AFTER the Windows migration. Don't open to many
streets at once. Standard windows password configuration rules are not
as flexible as what you have on the i - this may mean changing the
default password policy on your i or purchase a password management
solution for your Windows domain.

--
Read my blog at http://projectdream.org
--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.