EXPERT Windows Sysadmin

Profile

EXPERT Windows Sysadmin
I am looking for an EXPERT Sysadmin with years of experience in Windows Servers and Active Directory. The environment is a small 50 people environment with 2 ADs and 10 Servers. I want an assessment and review of current AD and Windows configurations, a proposal for improvements and after agreeing on those improvements actually make those [login to view URL] focus must be on Microsoft Best Practices and Security and the more improvements ideas the better.
Domain Controllers
• Security Best Practices
• Important Custom Audit Event Viewer views or PowerShell Scripts
• NTP (for DCs and clients)
• Disable NTLM (after monitoring if it’s not being used)
• DNS health check
• Delegated user for everyday management of AD (installing new apps on clients, joining new computer, etc.)
Account & Password Policy
• Password policy (different settings for different groups)
• Lockout policy (different settings for different groups) (done, needs review)
o Questions: how to protect admin/administrators from lockout
Auditing (Centralize on DC)
• Logon/Logoff (done, needs review)
• Screen Lock/Unlock
Printers/Scanners
• Add printers to clients at login based on their group membership (locally connected printers/scanners should still be able to work)
Drive Maps & Folder Redirection
• Map both personal and department shares based on username and user department group (done, needs review)
• Redirect user folders to fileserver (done, needs review)
Security
• Block USB (done, needs review)
• Prevent browsers form storing passwords (IE, Chrome & Firefox)
• Disable macros and other unnecessary features for MS Office apps (with 2 trusted paths)
Desktop & Display
• Desktop Background (done, needs review)
Event Viewer Custom Views/PowerShell
• Logon/Logoff
• User Activity time & history
• Bad passwords
• Account lockouts with reason
Skills:
Windows Server
, Active Directory
, System Admin

Company info

Sign Up Now - WashingtondcCrossing.com