Hello Fellow Spiceheads,
I recently took a position as a IT support person in a growing small company. Over 90 employees have been added in the past year. There is a domain, but only a handful of servers are on the domain. There are several major issues, including major DNS issues (DNS lookup will not work!) 125 laptops/PC's in a work group, no network management at all, servers are not patched, nor have anti virus on them. All workgroup devices have "free" anti virus on them.
My challenge is to morph the IT network from it's current hobby configuration to a professional functional, safe, and secure network
My schedule to get things done:
1) Ticketing solution Heat, H2O, or Trackit
1a) Anti Virus - I'm going with a corporate Avast anti virus solution, mainly because the other's I have tested will not remove the freeware avast thats currently installed before installing their anti virus. Avast will simply install a small addition to what's already installed.
1b) Resolve DNS issues
2) Move all PC's to the domain. (drive mapping, group policies, drive shares to mapp, security groups to create.
2a) There are accounts for network scanners to give read/rite access. These accounts are domain admin accounts!!
3) WSUS server, and some sort of network maint solution (Servers Alive)
4) Nessus to maintain a secure environment
5) Have a penetration test done to see where I am security wise
6) Security awareness training for all employees (Users do not currently change passwords because being on a workgroup, they (Me!) will have to remap all mapped drives! (Resources are on servers/domain.
7) Is there some some sort of whitepaper, or professional guide that I can distribute showing company bigwigs this is the proper way to do this to morph into a growing midsize company. Some sort of IT growth document?
Than you