Managing Contoso’s Active Directory Environment

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To manage the Active Directory environment, Contoso uses the following process:

1. Create the service management administrative delegation model.

2. Implement the service management administrative delegation model.

3. Hand off data management to data administrators.

4. Create the data management administrative delegation model for every business unit:

   1. Create an OU structure for every business unit.

   2. Create an administration model for data management.

5. Implement the data management administrative delegation model for every business unit.

The IT department is responsible for managing the Active Directory environment. The IT department is based in the Chicago headquarters and has the following components and users:

• CIO

  • Core Infrastructure (100)

  • Connectivity (30)

  • Messaging (30)

  • Business Applications (50)

  • IT Security (50)

  • Support Services (75)

Active Directory Administrative Personnel Overview

Of the approximately 325 employees in the IT business unit, 135 will be responsible for Active Directory service and data management, including managing the Active Directory directory service, user accounts, and all workstations, servers, and resources in the Contoso organization. They will also provide help desk support to the entire organization. The remaining 190 administrative personnel provide administrative coverage for network connectivity, messaging, and other network services.

Table 13 shows the types and numbers of administrative personnel in each administrative category. This team of administrators will create and implement the service and data delegation models for the organization.

Table 13 Active Directory Administrative Personnel