Server Admin

Job highlights

• . Scavenge licenses on a monthly basis to ensure that there is no excess license purchase required. Intune MDM MAM Support
• . Antivirus Patch Management: All devices should have latest antivirus definition windows patch with help of Patch Management Software provided by APL . .

Server Admin

Location: Andheri

Job Description

O365 Support

• Exchange Online, Microsoft Teams Office 365 email, One Drive, Azure AD and Intune Microsoft online services
• O365 Service monitoring and maintenance
• Query Management
• Monitoring/Tracking user accounts/licenses

Active Directory Support

• Domain Controller configuration management
• Health Hygiene Management
• Audit and monitoring activity
• Group Policy Management

Antivirus Patch Management

• Client-side Antivirus update as per requirement
• Client-side patch update as per requirement
• Troubleshooting resolution

Anti-Virus Patch Management on End User Devices

• To ensure latest version of the Antivirus client software Microsoft patches are available in the end user system.
• Antivirus Patch Management: All devices should have latest antivirus definition windows patch with help of Patch Management Software provided by APL
• Ensure automated latest virus definitions MS patches are being fetched from the server.
• To act on all the virus incident reports, Old virus definition, Systems not contacting server for updates, MS patches not updated, etc., sent out by APL IT
• Log all virus MS patches tickets and resolve on high priority
• Root cause analysis for repeat virus incidents MS patch incidents should be submitted

Active Directory Support

• User Accounts (Employees, Vendors, Service Providers, Dealers, Off-Roll contractors, Interns etc.)
• Regular Activities Create/Delete/Modify/Maintain
• Service Accounts (for which passwords are maintained by the system and not known to administrators)
• Administrative Accounts
• Distribution Groups
• Public Folders
• Contacts
• Password resets
• Access control lists
• DNS zones
• Office365 license assignment/revocation

AD System Administration

• Help create and maintain different password policies for different user types.
• Remove unnecessary access.
• Manage stale user and computer objects.
• Plan and implement Upgrades and Updates to AD / ADFS Services.
• GPO Management (including creation and deletion) for various security policies and software deployment.
• Set-up and follow Change Management processes for all in-scope services.

Active Directory Services/ADFS Troubleshooting

• Access issues to files and folders
• User Account expiry
• Account lockouts
• Trust relationships errors
• Authentication failures
• DNS resolution failures
• IP address assignment failures

AD/ADFS Health Check, Monitoring Auditing

• Monitoring and generating reports using AD Audit Plus
• Provide logs and evidence of access/authentication/change as and when required by internal audit teams

Email Management (O365 Support)

• Develop, document and update service processes, which should be aligned as per latest ITIL standard
• Manage quota and define control as per standards
• Preform day to day proactive/reactive administration, troubleshooting and support activities and keep users informed of incident progress
• Troubleshoot O365 / Outlook issues (along with network team if necessary)
• Coordinate with the users/FMS team for issue resolution and guide them to follow the defined SOP
• Coordinate with Microsoft for O365 issues resolution as needed
• Support issues with email security and mail flow by coordinating with third party vendor such as Mime Cast, SFT etc.
• OneDrive for Business Help users set up and make use of ODFB along with sharing files with other users within the Company and troubleshoot issues
• Teams Help users create Teams and Channels to collaborate effectively on PC as well as on mobile. Also, troubleshoot issues related to Teams.
• Contact/Escalate to the identified primary contact of APL, in case of any Server hardware issue or network issue, who will in turn co-ordinate with the vendors for resolution
• Prepare weekly reporting as per agreed format
• Create / Edit / Delete shared mailboxes as per requests
• Create / Edit / Delete cloud email accounts
• Create / Edit / Delete groups as per requests
• Configure/re-configure AD Sync as required
• Configure / troubleshoot any settings / rules on O365 Services in scope as required by business/IT.
• Scavenge licenses on a monthly basis to ensure that there is no excess license purchase required.

Intune MDM MAM Support

• Windows 10 laptops and Tablets Intune and Azure AD enrolment
• Device reset and enrolment when device ownership changes
• Device and User Groups for policy application
• Intune MAM policies for BYO Devices (employee mobile phones)
• Intune MDM policies for company owned Windows tablets/laptops
• Reports on hardware and software of MDM managed devices
• Reports on user to device mapping
• Remote/user side support for enrolment/reset of devices
• Deploy software and software upgrades through Intune/MaaS360 on all managed devices as per requirement
• Deploy OS upgrades using MDM policies with minimal disruption
• Tablet configuration into Azure AD and Intune
• OS updates for Apple iOS devices
• Record keeping for all mobility devices.
• Keeping inventory for tablets/ IPADs in Matrix-42 and MIS.
• Monthly reconciliation of assets with resigned employee list