Educational Storage Provisioning
May 2004
Creating Virtual Classrooms
Agenda
• Introduction to Condrey Consulting Corporation
• Identity Based Storage Management
•
•
Attacking Virtual Classroom Storage
Access – Web Based Access & Management
•
Provision – Create, Manage & Clean Up
Security – What Rights do people have to storage
•
Audit - Who is Accessing Servers and Storage
•
• Tying it all together
• Live Demo
• Q&A
2
Condrey Consulting Corporation
Company Overview
• David Condrey – Owner and CEO
• US Software Engineering Corporation based in Greenville, SC
• Customers in 33 countries representing Commercial, Fortune
1000, State & Federal Government, Military, Healthcare,
Higher-Ed and K12
• Well known and respected by customers, especially in the
academic market
• Well known at Novell – Model Partner
• Invested in the future of Novell
3
Condrey Consulting Products Overview
• File System Factory™ – Novell Nsure - Novell Price List - SLA
•
•
•
Provision, Manage, Cleanup
Lifecycle Content and Data Management (ePortfolio)
Virtual Classroom Storage
• IUAdmin™ - Web Based Access and Management
•
•
•
•
Policy Based Personal and Collaborative Storage Access
Web Based Access to Personal and Group Content
Web Based Help Desk Administration
Web Based User Self-Service and Password Reset
• AuditLogin™ and TrustFun
•
4
Who’s Accessing Storage and What Rights Do They Have?
- Login/Logout - Date, Time,Workstation
- Trend Reports and Graphs
- File and Directory Rights Analysis
File System Factory Education Customers
• University of Kentucky – 43,000 users
• Northern Illinois University – 67,000 users
• Minnesota State Colleges and Universities – 93,000 users
• Charleston County Schools, SC – 42,000 users
• University of Georgia – 60,000 users
• Embry Riddle University – 12,000 users
• Hemet School District, Los Angeles
• Grand Rapids Community College
• Savannah Chatham County Schools, Georgia
• Douglas County Schools, Georgia
• Newton County Schools, Georgia
5
More File System Education Customers
•Northwestern Michigan University
•Old Dominion University
•Madison Area Technical College
•Waukesha County Technical College
•Blackhawk PA School District
•Marysville Village Schools
•Spearfish School District
•Maine Township High School District
•Waubonsee Community College
•Western Illinois Univeristy
•Escondido Union High School District
•Sutton Public Schools
•Omaha High School
6
•Escondido Union High School District
•Sutton Public Schools
•Ramaz School
•Augsburg College
•Southwestern Community District No. 9
•Le Moyne College
•Macon County R-1
•Grant MacEwan College
•Clemson University
•Community Consolidated School
District – Illinois
•Ramaz School
•Augsburg College
Sample of Education Customers Leveraging
File System Factory, IUAdmin and AuditLogin
7
Attacking Virtual Classroom Storage
Virtual Classroom Storage
Let’s model our approach after the paradigm that has
been working for over 100 years.
•
•
•
•
•
Student Lockers – Personal Storage for the Student
Classrooms – Where the teacher interacts with the students. All
classrooms in the school operate on the same basic premise but the
teacher controls.
Teacher Desks – Personal Storage for the Teacher.
Classroom Areas – Function-specific areas of the classroom. Teacher
controls the layout of these and students have controlled access.
Student Desks in the Classroom – Personal area in the class for the
student. Off limits to all except the owning student and the teacher.
The model works, plus the user base already understands it!
9
The Model
Smith
Billy’s
Desk
Bulletin
Board
Teacher
Work &Assignments
Storage
& Materials
AreaArea
Smith
Sue’s
Desk
Billy’s
Desk
Linda’s Sam’s
Desk
Desk
Linda’s
Desk
Tom’s
Desk
Zane’s
Desk
Special
Projects
Area
Sue’s
Desk
Sam’s
Desk
Classroom
Lopez
Lopez
Bulletin
Board
Assignments
& Materials
Area
Billy’s
Desk
Lopez
Sue’s
Desk
Tom’s
Desk
Tom’s
Desk
Zane’s
Desk
Linda’s Sam’s
Desk
Desk
Special
Projects
Area
Bulletin
Board
Jones
Billy’s
Desk
Sue’s
Desk
Tom’s
Desk
Assignments
Linda’s Sam’s Zane’s
& Materials
Desk
Desk
Desk
Area
West Hallway
Zane’s
Desk
Student Lockers – Personal Storage for the Student
10
Jones
Bulletin
Board
Lockers
Special
Projects
Area
Assignments
& Materials
Area
Special
Projects
Area
Personal Storage- Student Lockers
Identity
(User)
eDirectory
Event/
Policy
FSF
Personal Storage for the Student
Lifecycle Data Management
ePortfolio
11
Personal Storage- Teacher Desks
Identity
(User)
eDirectory
Event/
Policy
FSF
Teacher
Work & Storage
Area
12
Group Storage- Virtual Classrooms
Collaborative Unit
(Group)
eDirectory
Event/
Policy
FSF
Mr Lopez - Spanish Class
Teacher
Work & Storage
Area
Bulletin
Board
Assignments
& Materials
Area
Special
Projects
Area
13
Group Storage- Virtual Classrooms
Classmates
(Members)
eDirectory
Event/
Policy
FSF
Lopez – Spanish Class
Teacher
Work & Storage
Area
14
Bulletin
Board
Billy’s
Desk
Sue’s
Desk
Assignments
& Materials
Area
Linda’s
Desk
Tom’s
Desk
Special
Projects
Area
Student and Teacher Access
Student Access
Assignments
& Materials
Area
Bulletin
Board
Smith
Billy’s
Desk
Special
Projects
Area
Assignments
& Materials
Area
Classroom
Bulletin
Board
Lopez
Billy’s
Desk
Special
Projects
Area
Assignments
& Materials
Area
Jones
Billy’s
Desk
West Hallway
16
Bulletin
Board
Lockers
Special
Projects
Area
Teacher Access
Faculty Workroom 1
Assignments
& Materials
Area
Bulletin
Board
Lopez
Box
Lopez-Class 1
Teacher
Work & Storage
Area
Billy’s
Desk
Sue’s
Desk
Linda’s
Desk
Tom’s
Desk
17
Lopez-Class 2
Bulletin
Board
Special
Projects
Area
Teacher
Work & Storage
Area
Bulletin
Board
Frank’s
Desk
Deb’s
Desk
Assignments
& Materials
Area
Bill’s
Desk
Kia’s
Desk
Special
Projects
Area
Where’s my stuff?
Users need an easy way to find their storage …even if
you need to move it.
Personal Storage and Group Storage.
Map a Drive? There’s only so many letters in the alphabet.
Login Script Management is a headache for group storage.
 Client-based access using URAccess™
 Web-based access using IUAdmin™ (optionally tied to a
Portal)
18
URAccess: Client-based Access to Virtual
Class Storage
End-User tool for dynamically building personalized access
links to storage.
Leverages Home_Directory user attribute for personal storage.
Leverages cccFSFactoryHomedir group attribute for shared storage.
Creates a local set of UNC paths and description presented to the
user in a Windows UI.
Like App-Launcher for ZENworks, except provides access to storage.
List can be refreshed at any time.
Supports multiple tree connections.
19
URAccess
20
IUAdmin™ Web Based Access & Management
User Self
Service
(each can be
disabled)
Personal
And Group
Storage Access
Help
Desk
(these options
are not seen by
the end user
interface – only
the admin
interface.)
21
Personal
Storage
Group
Storage
Managed By File
System Factory
Events & Policies
Teacher and Admin Help Desk
22
IUAdmin™ - Summary
• Web Based Access to Netware Personal Content and ePortfolio
Managed by File System Factory Policies
• Web Based Access to Collaborative Group Content Based on
File System Factory Policies
• Integrate with Novell Extend Portal, Netware 6.5 Virtual
Office Portal and Novell iChain
• User Self Service
•
Self-Service Password Reset
•
Let Users Optionally fix their own problems
• Help Desk Administration
Intruder Lockout
Grace Logins
Login Disabled
Account Expired
24
•
Location and Departmental based Help Desk
•
Help Desk Group Management
•
User Help Indicators Identify Account Problems
IUAdmin™ Architecture
•
Built on top of Novell’s HTTPSTK..no webserver
to install or configure.
•
SSL connections for security.
•
Contextless Login.
•
No schema extensions. However
optional extensions are provided
for increased functionality.
•
Runs on Netware 5.1 or above with
any version of eDirectory.
Other products provide
Management Paks that plug in
to the architecture.
25
User Self
Service
File
System
Access
File
System
Factory
Help
Desk
IUAdmin
Core
Architecture
File
System
Mgt
Resource
Mgt
AuditLogin ePortfolio
Trustfun
No More Floppy Drive Headaches
•
Virus’s
• Limited Space
• Drive Failures
• Management
Nightmare
Solution
File System Factory
IUAdmin
26
Provision - Create, Manage, Clean Up
Novell File System Factory
Automatic Disk Space
for all
Students
and Staff!
28
Novell File System Factory
Automatic Disk Space
for each Class and
Work Group!
Virtual
Classrooms
29
Novell File System Factory
Automated
Home Directory Management:
Create It,
Manage It,
and most importantly…
Clean It Up!
30
Novell File System Factory
Lifecycle Data and
ePortfolio Management:
Create It
Move It
Manage It
31
Novell File System Factory
All you have to do is
create the users and groups…
…Any way you want…
…We’ll handle the rest!
32
Identity-Based Storage Management
ZENworks
for
Desktops
Student DB
BorderManager
Identity Mgr
Driver
eDirectory
Identity Mgr
AD
Driver
Active
Directory
NetMail
FSF
Driver
LINUX
• Policy Based, Event-Driven
• Control it with ZENworks®
like policies.
• Load balancing
33
NetWare
NetWare
• Storage creation
• Storage management
• Storage cleanup
• Personal user storage
• Group storage
FSF Methodology
New workflow component allows
employee’s manager to review,
reassign, or vault user data prior to
deletion.
Algorithm: Random Balance
Rights: RWCEMFA
Quota: 150 MB
Template: SERV1/VOL1:Policies
DelWait: 90 Days
SCSD
ES
MS
•Create
•Rename
•Delete
Policy
HS
BJones
BSmith
Copy
SERV1/VOL1:POLICIES
34
Target
File Systems
RWCEMFA
BSmith
BJones
150MB
Policy Assignment & Data Migration
Jefferson
Employee
Students
Other
Sunshine Elem
Lincoln Middle
Riverside High
BSmith
•
BSmith
Seamless
• Fault-tolerant
• Safe
Scheduler – 9:00PM
Policy
Policy
BSmith
25MB
35
Policy
BSmith
50MB
Northern Illinois University
Data Migration - Backfill
NIU
Faculty
Students
Other
BSmith
RJones
KJackson
Admin issues Backfill
with “Enforce Policy
Paths” option, which
will move data.
RJones
KJackson
RCroom
NCS
DWyatt
Pentium Pro 200’s –
0 Users
67,672
Users
36
Policy
RJones
BSmith
KJackson
RCroom
BSmith
RCroom
DWyatt
DWyatt
Education Group Policy Example
Assign Policy to Courses Container
Algorithm: Random Balance
Rights: none
Quota: 500 MB
Template: SERV1/VOL1:GroupSample
DelWait: Never
Jefferson
Courses
Create Course
Group Object
Employee
Student
Target
File Systems
SPAN340-001 Automatically Create Group Storage and Assign Policies
Copy Course Files for Each Student from Template
Copy
SERV1/VOL1:GroupSample
37
Policy
SPAN340-001
150MB
Group Storage- Virtual Classrooms
Collaborative Unit
(Group)
eDirectory
Event/
Policy
FSF
Copy Course Files for Each Student from Template
Copy
SPAN340-001
150MB
38
Group Storage Policy Template
Teacher
Work & Storage
Area
Bulletin
Board
Assignments
& Materials
Area
Student Desk
Area
39
Group Policy Templates
Configuration Steps
Create
Group
Object
SPAN340-001.MS.COURSES.STATEU
Create FSF Group
Policy Using the
FSF Management
Interface
Create eDir
Objects
Create
Template
Assign
Rights to
Directories
Assign
Members
& Owners
to the
Group
40
Group Policy Templates
Assign Students as Members and Instructors as Owners
Members
JSmith.Students.Jefferson
MRoberts.Students.Jefferson
NFrost.Students.Jefferson
PJones.Students.Jefferson
RBrooks.Students.Jefferson
SSmith.Students.Jefferson
STimms.Students.Jefferson
TJones.Students.Jefferson
TSmythe.Students.Jefferson
WClark.Students.Jefferson
41
Owners
ABelcher.Staff.Jefferson
KAlesanto.Staff.Jefferson
Create Virtual Classroom Storage
File System Factory
Automatically Provisions
Storage for Students and
Instructors
42
Storage Management
Storage Dashboard – Trend Analysis
Storage Trends on User and Group Policies
44
Administrative Storage Dashboard
Event Statistics
45
Storage Health Check
https://your.server.name.or.ip.address:8009/FSF/HTTP_FSFExecutiveDashboard.
Quota Manager – User Interface
Green = space available > 25% of quota
46
Yellow = space available < 25% of quota
Red = space available < 10% of quota
Quota Manager – User Interface
47
Employee Data Manager - Workflow
48
Employee Data Manager - Workflow
49
Rights and Trustee Analysis
File System Rights Analysis
51
File System Rights Analysis
OWNERS
MEMBERS
52
TrustFun - Rights and Trustee Analysis
Win32 Application
53
TrustFun Report
54
Trustee Assignment Detail
55
Who’s Accessing Storage
AuditLogin – Who’s Accessing Storage
57
AuditLogin Graph
58
Tying it all Together
GroupWise®
eDirectory™
User
ZENWorks™
File System
UIMPORT
LDAP
IDM
Console
One
Factory
NetMail
Faculty
Students
User
File System Access
Help Desk
Self Service
Password Reset
Novell
BorderManager
Identity Based Storage
• Home Directory
• Class Storage
• Team Storage
• Student ePortfolio
• Lifecylcle Management
• Storage Management
IUAdmin™
AuditLogin™
User
59
Audit Storage Access
Reports & Graphs
Virtual Classroom
Grade Promotion Policy
Production Tree
SCSD
SHS
Internet
STUDENTS
SMS
IUAdmin
User
HS1
STUDENTS
User
HD
Novell
BorderManager
EP
FSF
MS1
Student Locker
Grade Promotion eDirectory
Home Directory
ePortfolio
IDM
60
UIMPORT
LDAP
Custom or
3rd Party
Console
One
Class
Storage
Graduation Policy
Production Tree
SCSD
Internet
DIST
Graduated
HS1
IUAdmin™
SMS
STUDENTS
HD
Novell
BorderManager
EP
User
FSF
Graduation
Student Locker
eDirectory
IUAdmin™
ePortfolio EP
IDM
61
UIMPORT
LDAP
Custom or
3rd Party
Console
One
Solution Benefits
Students
•
Virtual Classrooms
•
•
Lifecycle Data Management
•
Web Based Access to resources and
lesson assignments
•
•
•
Self Password Reset
Teachers
Reduced help desk support costs
Reduced time needed to manage
personal and group storage
Leverage existing systems and
infrastructure – No upgrades
Administrators
•
Web based access to resources & data
•
Team Collaboration
•
Virtual Classrooms
•
Minimal cost with large return
Team Collaboration with Students &
Teachers
•
•
62
IT Departments
•
Teacher ePortfolio
•
Self User Self Service & Password Reset
•
Web based access to resources and
data
User Self Service & Password Reset
DEMO
•
•
63
•
File System Factory
–
Backfill Existing users -Create Policy for Faculty
–
Promotion and Move Policy
–
Graduation and Termination Policy
–
Course and Group Policies – Course Example
–
Rights and Trustee Analysis
–
URAccess – Access to Group Storage – No Drive Mappings
–
Quota Manager Help Desk
–
Executive and Management Dashboards
IUAdmin
–
Web based access to files for Students and Faculty
–
Provision Student and Faculty Web Pages
–
Contextless Login
–
Self Service Password Management
–
Help Desk
AuditLogin and TrustFun
Current AuditLogin Educational Pricing
Government and Education Pricing*
AuditLogin
Description
SKU#
Price
V3 Single Server
ALV3NSSEDU
$100
V3 Three Server Pack (save 25%)
ALV3N3PEDU
$225
ALV3NSTEDU
$1,000
ALMAINTEDU
$350
V3 Three Server Pack Upgrade**
ALV3USSEDU
$50
V3 Site License Upgrade **
ALV3USTEDU
$500
Gov/Education New Licenses
V3 Site License
Gov/Education Maintenance
V3 Yearly Upgrade Protection and Maintenance
Option***
Gov/Education Upgrade from Version 2
64
Current IUAdmin Educational Pricing
Flexible Pricing Based on District Needs
IUADMIN Government/Educational Pricing*
New License
65
Maintenance
Maintenance
User Count
SKU#
Price
SKU#
Price
1000
IAV101KEDU
$700
IAMT01KEDU
$140
2000
IAV102KEDU
$1,000
IAMT02KEDU
$200
4000
IAV104KEDU
$1,600
IAMT04KEDU
$320
8000
IAV108KEDU
$2,400
IAMT08KEDU
$480
16000
IAV116KEDU
$3,200
IAMT16KEDU
$640
32000
IAV132KEDU
$4,800
IAMT32KEDU
$960
Unlimited
IAV1UNLEDU
$6,400
IAMTUNLEDU
$1,280
66