ETS maintains the central CAMPUS Active Directory domain, which comprises a database of accounts, groups, configuration information and policies used by critical core services and by numerous departmental line-of-business applications.
Microsoft's Active Directory provides identity and access management services that range from workstation single sign-on and policy-based configuration management to fine-grained control of access to network resources like file shares and SharePoint sites.
Active Directory contains NetID accounts, synced from the UVM Identity Management System, as well as groups derived from ERP systems like Banner and PeopleSoft.
Most people won't directly interact with Active Directory, but many critical services we use every day depend on the data in Active Directory. For example:
- Workstation management, including single sign-on, configuration management, and installation of critical security and software updates
- Shared and individual network storage
- Self-service file recovery
- Print services
- Email and calendar services
- SharePoint collaboration
- Delegated security group management
- Drive encryption management and recovery key escrow
Additionally, numerous departmental applications integrate with Active Directory to allow access based on existing NetID accounts.
Most UVM-owned Windows computers should be joined to the CAMPUS domain. This enables login with your NetID and password and automatic access to individual and departmental file storage.
For IT Professionals
Departments may manage some of their own Active Directory resources, most often security groups to control access to folders in a network share. To manage AD objects that you have been delegated rights to, you will require the Active Directory Users and Computers (ADUC) tool found among the larger set of AD tools provided by the Remote Server Administration Tools (RSAT) update for Windows 10.
Active Directory supports several Internet standard protocols, most notably Kerberos and LDAP, for integration.
Not what you're looking for?
Our Print Management and Shared Folders services are closely tied to Active Directory and the terms are sometimes used interchangeably. If you need a print queue created and published in Active Directory, or are seeking authorization changes to a shared folder, please see these services.