Server Admin

Server Admin Job Description

O365 Support

Exchange Online, Microsoft Teams Office 365 email, One Drive, Azure AD and Intune Microsoft online services

O365 Service monitoring and maintenance

Query Management

Monitoring/Tracking user accounts/licenses

Active Directory Support

Domain Controller configuration management

Health & Hygiene Management

Audit and monitoring activity

Group Policy Management

Antivirus & Patch Management

Client-side Antivirus update as per requirement

Client-side patch update as per requirement

Troubleshooting & resolution

Anti-Virus & Patch Management on End User Devices To ensure latest version of the Antivirus client software & Microsoft patches are available in the end user system.

Antivirus & Patch Management: All devices should have latest antivirus definition & windows patch with help of Patch Management Software provided by APL

Ensure automated latest virus definitions & MS patches are being fetched from the server.

To act on all the virus incident reports, Old virus definition, Systems not contacting server for updates, MS patches not updated, etc., sent out by APL IT

Log all virus & MS patches tickets and resolve on high priority

Root cause analysis for repeat virus incidents & MS patch incidents should be submitted

Active Directory Support

User Accounts (Employees, Vendors, Service Providers, Dealers, Off-Roll contractors, Interns etc.)

Regular Activities Create/Delete/Modify/Maintain

Service Accounts (for which passwords are maintained by the system and not known to administrators)

Administrative Accounts

Distribution Groups

Public Folders

Contacts

Password resets

Access control lists

DNS zones

Office365 license assignment/revocation

AD System Administration

Help create and maintain different password policies for different user types.

Remove unnecessary access.

Manage stale user and computer objects.

Plan and implement Upgrades and Updates to AD / ADFS Services.

GPO Management (including creation and deletion) for various security policies and software deployment.

Set-up and follow Change Management processes for all in-scope services.

Active Directory Services/ADFS Troubleshooting

Access issues to files and folders

User Account expiry

Account lockouts

Trust relationships errors

Authentication failures

DNS resolution failures

IP address assignment failures

AD/ADFS Health Check, Monitoring & Auditing

Monitoring and generating reports using AD Audit Plus

Provide logs and evidence of access/authentication/change as and when required by internal audit teams

Email Management (O365 Support)

Develop, document and update service processes, which should be aligned as per latest ITIL standard

Manage quota and define control as per standards

Preform day to day proactive/reactive administration, troubleshooting and support activities and keep users informed of incident progress

Troubleshoot O365 / Outlook issues (along with network team if necessary)

Coordinate with the users/FMS team for issue resolution and guide them to follow the defined SOP

Coordinate with Microsoft for O365 issues resolution as needed

Support issues with email security and mail flow by coordinating with third party vendor such as Mime Cast, SFT etc.

OneDrive for Business Help users set up and make use of ODFB along with sharing files with other users within the Company and troubleshoot issues

Teams Help users create Teams and Channels to collaborate effectively on PC as well as on mobile. Also, troubleshoot issues related to Teams.

Contact/Escalate to the identified primary contact of APL, in case of any Server hardware issue or network issue, who will in turn co-ordinate with the vendors for resolution

Prepare weekly reporting as per agreed format

Create / Edit / Delete shared mailboxes as per requests

Create / Edit / Delete cloud email accounts

Create / Edit / Delete groups as per requests

Configure/re-configure AD Sync as required

Configure / troubleshoot any settings / rules on O365 Services in scope as required by business/IT.

Scavenge licenses on a monthly basis to ensure that there is no excess license purchase required.

Intune MDM & MAM Support

Windows 10 laptops and Tablets Intune and Azure AD enrolment

Device reset and enrolment when device ownership changes

Device and User Groups for policy application

Intune MAM policies for BYO Devices (employee mobile phones)

Intune MDM policies for company owned Windows tablets/laptops

Reports on hardware and software of MDM managed devices

Reports on user to device mapping

Remote/user side support for enrolment/reset of devices

Deploy software and software upgrades through Intune/MaaS360 on all managed devices as per requirement

Deploy OS upgrades using MDM policies with minimal disruption

Tablet configuration into Azure AD and Intune

OS updates for Apple iOS devices

Record keeping for all mobility devices.

Keeping inventory for tablets/ IPADs in Matrix-42 and MIS.

Monthly reconciliation of assets with resigned employee list