Holcim Services (South Asia) Ltd.

Standardizing Active Directory(AD) ID naming convention for all users in in.holcim.net domain

Mumbai, 21st Nov 2011 ramachandraiah.goduguluri@holcim.com

Classified: FOR INTERNAL USE ONLY

Agenda
Background
Objective Scope of Services Risk and Business Impact

Execution Plan
Roles and responsibilities Deliverables

2
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Background
3561 active AD IDs as on 31st Oct 2011 are not as per Holcim naming convention (Majority of them are from ACL)
Holcim naming convention was implemented during AD domain migration for ACC in 2009 (from acccement.com to in.holcim.net). Same naming convention is followed for new AD ID creation from thereon. New AD IDs created for ACL, ACCCL and HSSA after June 2010 are as per Holcim naming convention

3
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Active AD User Ids as on 31st Oct 2011

4
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Objective
Standardizing the AD IDs in in.holcim.net domain as per Naming convention used Globally for Holcim Group Companies

5
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Scope of Services & Exclusions

Scope of Service
Rename active AD IDs which are not in line with Holcim naming convention Update new AD ID in the following applications after renaming

CA Tool
GRC Travel Portal (applicable for ACC and HSSA only) Leave Portal (applicable for ACC only) Websales RMIS Qlikview Cmd QC (applicable for ACCCL only) VPN

Internet (Websense)
Shared drive
6
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Risk and Business Impact

Risk

End Users may not be able to access their computer where modified AD ID details are not reached on time User may face problem in accessing GRC, Travel portal etc. Communicate appropriately to the effected users where AD ID changes

Business Impact

Mitigation

7
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Execution Plan
Step 1:- Test - AD ID Rename for few users and monitor application accessibility, then finalize the process for AD ID rename. Target Completion Date: 10th Nov 2011

Step 2:- Prepare User wise schedule and share the list of users with old logon name along with proposed new logon names to Location IT Support Teams. Target Completion Date: 16-24th Nov 2011

Step 3:- Communicate to end user in advance informing about the new logon name and scheduled date and time. Target Completion Date: 24-26th Nov 2011

Step 4:- Change the AD logon name as per schedule. Update the status sheet. After change support by Application Teams and Local IT Engineers . Target Completion Date: 25th Nov 27h Dec 2011

Step 5:- Extended Support in resolving any issues after renaming AD IDs. Target Completion Date: 30th Dec 2011

8
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Execution Plan Application wise

9
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

AD ID Rename Profile Test Result

After AD ID rename
User has to login to his computer with his new AD Logon ID No change in password No changes in user profile in local computer No issue in accessing shared / mapped network drives

10
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Roles and responsibilities

HSSA Team
Provide Holcim ID details Monitor AD ID rename activities by AD Team and Location IT Teams

AD Team
Update/Correct user details in Active Directory User wise schedule plan for AD ID rename Communication to Location IT Support teams / End Users Rename AD IDs Coordinate with Location IT Support teams

Location IT Support Team

Support in identifying missing user details (like Emp ID, Email address, Location name etc..) Communication to End Users Provide support in resolving any issues for End User, after AD ID rename

Holcim Services (South Asia)

Classified: FOR INTERNAL USE ONLY

11

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Roles and responsibilities CA Tool Admin

CA Tool Admin

Modify System Logon ID to proposed new logon ID for effected users in CA Tool

12
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Roles and responsibilities Travel Portal Team

Travel Portal Team
Check for any open transaction with old user ID If no open transactions, then Modify Emp. ID and E-Mail Address for old user account in Travel portal to invalidate the same Inform user to login with new user ID and update the personal details in travel portal Note:- Transaction done with old user ID will not be visible after login with new user ID, as new ID is treated as new account. Thus user has to update his personal information in Travel portal

13
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Roles and responsibilities Websales / RMIS / QlickView Teams

Websales Team
Websales Administrator has to update users Logon id information in Websales database with new AD Logon ID of respective user User has to login with new AD ID User can see old requests which were raised using his old AD ID

RMIS Team
RMIS Administrator has to update user logon ID information in RMIS database with new AD Logon ID User has to login with new AD Logon ID

Qlikview Team
Qlikview Administrator has to update user logon ID information in Qlikview database with new AD Logon ID User has to login with new AD Logon ID

14
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Roles and responsibilities GRC / CmdQCTeams

GRC Team
If user is in GRC approvers list, GRC Administrator has to update GRC Approvers list with new AD ID of the user, and forward any pending requests for approval to users new AD ID User has to login with new AD ID

CmdQC Team
CmdQC Administrator has to add new AD ID of the respective user to required role groups in CmdQC application database User has to login with new AD Logon ID

15
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Deliverables
All Active AD IDs will be as per new naming convention standards

16
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Q&A

Question Please

17
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission

Decision / Approval
Decision / Approval Yes / Approved No / Not approved

Approved ?
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Yes / No
18
Template Ver-1.0 06.06.2012/XX
Not to be quoted or reproduced without written permission

Title

Our Values

Strength.Performance.Passion.

19
Holcim Services (South Asia)
Classified: FOR INTERNAL USE ONLY

Title

Template Ver-1.0 06.06.2012/XX

Not to be quoted or reproduced without written permission