Wednesday, October 27, 2010

Citrix Cleanup ... still going

I'm going to need assistance from each one of you who may have any information regarding the following:
I am planning to cleanup the Citrix accounts (user accounts, groups and server objects) from Active Directory. and at this point, I have a list of accounts, where to my knowledge, we are only using 3 of them for real purposes: provide privilege access to our Aeries users in the virtual environment.
However, there is a list of quite a few more groups and users that don't seem like they are being used anymore, and I need help identifying if I'm mistaken on any of them.

Following are the 3 groups that I know are relevant and are going to be kept:
CN=CitrixHRS,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixSchl,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixDist,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us

These 3 groups will be migrated accordingly to match VM access and will be renamed:
AeriesHRS, AeriesSchool and AeriesDistrict respectively.

Now, I need your help on the following groups and accounts:
Account:

CN=ABIguy1,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=ABIguy2,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=ABIguy3,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CTest,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=AbiDemo,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=Kevin UserDst,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=Kevin UserSch,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=AeriesDotNetUser,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=Kevin Admin,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us


- I know that ABIGuy# accounts are being used. Do we need 3 of them?
- I'm pretty sure AeriesDotNetUser is being used. can you confirm?
- What about the rest of the accounts? 


Groups:

CN=CitrixMultiSession,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=AbiIUSRaccounts,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixAbiTrainer,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixAbiUser,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixAbi,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixAdminSQL,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=SysTools,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixAnalyst,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixMDB,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=AeriesDotNetUsers,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixManager,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixHRSadmin,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixFastDist,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us
CN=CitrixExporter,OU=SQL-Citrix,OU=Service Accounts,DC=chino,DC=k12,DC=ca,DC=us

- Possibly AeriesDotNetUsers group may still be used somewhere.
- I think all other groups are useless now. can anyone confirm?

I am planning to cleanup those accounts by tonight hopefully. Please do go through this, and let me know  if you have any information. For anything that we may miss, we'll deal with it when it comes.

You are able to post a comment to this article within the blog, this way, everyone can see it.

p.s: if you decide to hit reply on the published post, please do send the email to my chino account, as Barracuda seems to block outgoing mail with the [CVUSD Changelog] tag in the subject.

No comments:

Post a Comment

Please make your comment. (GMK)

Note: Only a member of this blog may post a comment.