question

jnpickering avatar image
jnpickering asked

How to identify dependencies on AD account

In brief, I have been asked to help unravel a situation where a generic development AD user account has been used for years across multiple environments to set up jobs, packages, SSRS connections, SFTP & FTP tasks etc etc. Initially this only affected the development environment, but it has crept out over all environments over years. Management would like IT to delete this account, so we need to remove the dependencies before deleting it. This involves 60+ servers (virtual and physical) and hundreds of databases. Has anybody else experienced a similar situation and resolved it? We plan to set up new more tightly scoped users (either per server or some other logical grouping) to replace this account, my main question is how to go about finding all the touch points that will need resolving. Ideally I'd like to migrate each DB as we clean it up, but this is not an option, the issue needs to be resolved without migrating databases to new servers. We'll need to update the below plus a few I have no doubt not thought of. Packages Procedures Network folder access permissions Job ownership/proxies SSRS datasources and SSIS connections etc Websites using this account Any tables that hold user details Does anyone know of any online resources that could help? Just trying to formulate a plan at this stage.
userdependencyaccountad groups
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

0 Answers

·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.