We’ll explore best practices for reducing risk and avoiding disruption during AD migrations, ways to improve security, ensure compliance and simplify AD consolidations, and integration processes that can help carefully manage your project before, during and after the actual merger.

1. Healthcare M&A Best Practices
How to Restructure and Modernize Active Directory
March 1, 2017

2. Confidential2
Today’s speakers
Ron Robbins
Sr. Product Manager, Microsoft Platform Management
Ron.Robbins@quest.com
Joe Tobias
Practice Manager, Professional Services
Joe.Tobias@quest.com

3. • Healthcare market trends and challenges
• Quest M&A integration framework
• Quest solutions overview
• Healthcare customer examples
• Q&A
Agenda

4. Confidential4
Quest Microsoft Platform Management solutions
have been used to migrate, secure and manage
more than 180M users globally.
But first … a word from our sponsor
Cloud | Hybrid | On-Premises

5. Healthcare market
trends and challenges

6. Confidential6
Factors driving healthcare M&A activity
What market and regulatory
changes are fueling IT
modernization and innovation
in the healthcare market?
Healthcare M&A
activity at record pace
$723.7 billion
• Global value of 2015
healthcare M&A deals
• 66% increase over 2014
HITECH Act
• Stimulate adoption of
EHR systems (i.e. Epic)
Affordable Care Act
• Shift to outcome-based care
• Rising costs / reduced payouts
• Increased competition

7. Confidential7
Active Directory consolidation challenges
Business
disruption
Operations are
dependent on
existing infrastructure
Tight
timelines
Pressure to meet
M&A commitments
Some TSAs have
costly penalties if
deadline is not met
Budget,
resources &
expertise
Many customers
lack internal
expertise or
resources
Planning,
inventory &
assessment
Continuous M&A
activity leads to
infrastructure sprawl.
Native tools provide
limited visibility
Security &
compliance
risk
Identify existing risks
and eliminate them
during consolidation
$

8. Confidential8
Unique IT challenges in healthcare M&A
• Regulation
• Interoperability and/or
rationalization
• Clinical staff usage patterns
• Impact of disruption

9. IT integration enables better
alignment with the mission
Our mission has “changed”
over time
How we deliver care has changed
over time
Technology infrastructure has changed
over time

10. Quest healthcare M&A
integration framework

11. Confidential11
Quest healthcare M&A integration framework
Integration
planning
• Discovery
• Architecture
Integration
execution
• Build
• Validation
• Coexistence
• Transition
Ongoing
business
• “New normal”

12. 12
Scope (who and what)
Provisioning & administration
Security, auditing & governance
User experiences
Application portfolio
AD users & groups
File servers & application servers
Workstation & virtual desktop environment
Integration planning
Discovery phase

13. 13
Integration strategy
Target design (logical & physical)
Target management (policies, processes, tools, staffing)
Test plans
Readiness requirements
Program scheduling
Program / project dependencies
Integration planning
Architecture phase

14. Quest planning solutions
• Enterprise Reporter
• Change Auditor (AD / AD Queries / Ex)
• UC Analytics
• Migration Manager for PSTs
• Many more!
“We are able to track who ‘touches’ AD
accounts – so no more mysteriously
disappearing computer or user
accounts. Auditing and accountability
has improved uptime.”
- Andy Hendrian, IT Director, Eisenhower Medical Center
TVID: 2FC-219-EOD
58%
gained visibility into
who has access to
what with Enterprise
Reporter
TVID: FCD-A3C-470

15. Pre-migration
Post-migration
 Utilize reports to identify opportunities
for clean-up and to better plan the
future environment
 Understand what should and should not
be migrated with a comprehensive
assessment of:
 Current usage including what users
and files you have and when a user
last logged in or resources were
accessed
 Current environment including
active vs inactive users and groups
across AD, WS and SQL Server
 Continually track and report on access,
changes and activities
 Assess and validate who has access to
what resources across the network
 Inventory migrated assets to be sure
migration is completed as planned
 Multi-platform support
 Windows Server
 Active Directory
 Exchange / Office 365
 SQL Server
Enterprise Reporter
Scalable visibility, auditing and reporting across your environment

16. Confidential16
Build
• Deploy infrastructure
• Configure sites &
services
• Implement admin tools
• Install integration tools
• Unit testing
Validation
• Take & test backups
• Synchronization &
coexistence
• Administration process &
tools
• Migration process
• User acceptance testing
Integration execution

17. Confidential17
Coexistence
• Directory
synchronization
• Data synchronization
• Update governance &
structure
• Update administrative
processes
• Application updates
Transition
• Migrate AD objects
• Migrate desktop
environment(s)
• Migrate file servers
• Migrate applications
• Clean up environment
Integration execution

18. Quest migration solutions
• Migration Manager for AD & File Servers
• Exchange Migration
• Recovery Manager (AD/Exchange)
• And many more!
“Can you find tools cheaper than Quest to do an
AD migration? Sure – you’ll work more to make
it run and it won’t expose the skeletons in the
closet that need to be addressed. Quest tools are
the defacto migration tools because they work,
every time.”
- Paul Caron, Supervisor – Platform Services, Maine Medical Center
TVID: 74A-164-B27
A large enterprise healthcare company
successfully consolidated 16AD
forests / domains and migrated up to
5000 AD users with Migration
Manager for Active Directory.
TVID: A24-3f1-2DF

19. Confidential19
Migration Manager for AD & File Servers
Migration Manager for AD: Users,
computers, servers, permissions and more
Secure Copy: Files, folders, printers, shares,
NTFS security

20. Confidential20
Migration Manager for Exchange

21. Confidential21
Migration Manager for PSTs

22. Confidential22
Migration Manager for Email Archives

23. Confidential23
Recovery Manager for AD Forest Edition

24. Confidential24
Roles & responsibilities
Provisioning & administration
Security & governance
Auditing & reporting
Ongoing business

25. •On-prem and Hybrid AD Security Solutions
IT Security Search & Recovery Manager FE
• Investigate AD security Incidents
• Continuously test AD business continuity plan
• Recover from a security incident
• Improve your RTO following a disaster
• Secure access to AD DC data
Enterprise Reporter
• Report on elevated permission in AD
• Visibility of open shares across servers
• Understand which servers have vulnerable
security settings
Active Roles & GPOADmin
• Enforce permission blacklisting /
whitelisting in AD
• Implement AD least-privilege access
model
• Prevent unauthorized access to
sensitive resources
• Auto-Remediate unauthorized activities
Change Auditor for AD
• Detect suspicious privileged AD
activities
• Alert on potential AD insider threats
• Notify in real time of unauthorized
intrusions against AD
• Detect and alert on brute-force attacks

26. Wrap-up & Summary

27. Confidential27
Customer story
Large Healthcare System
Challenge
• Consolidate 3 Active Directory Forests to enable
EHR roll-out and consolidate Exchange
• Limited availability of in-house resources
• Extremely customized desktop environment
Results
• Migrated as many as 600 users / workstations per
day; no disruption due to migration work
• Office 365 pilot and EHR testing done in parallel to
the migration effort
“This is easily the best option for our hospitals and the
system overall.”
-Senior Director of Information Technology

28. Confidential28
Customer story
Regional Healthcare System
Challenge
• Migrate off Novell to save substantial maintenance
fees
• Consolidate 9 Active Directory Forests to facilitate
an EHR roll-out
Results
• Migrated 17 Novell volumes (10 TB) and directory
services in 5 months
• Migrated 20k Users and 2,300 servers in 12
months
• No disruption to patient care and EHR roll-out
began as scheduled
“This is how we’ll be handling our acquisitions and
affiliates going forward.”
-Director of Information Technology

29. •Next steps
Visit us online
Quest.com/solutions/microsoft-platform-management
• Videos, case studies, product specs, etc.
Try our software
• Free 30-day trials (complimentary SC and Support assistance)
• POC – choose Quest Services or your preferred Partner
Join our community
Quest.com/community
• Product betas, how-to videos, discussions, blogs, tips, etc.

30. Watch webcast:
http://ow.ly/dxth309Esk6