New User Creation for Nalu
1. Login to “NALUS1 - DC, DFA, ADFS, Printer Server” through Screenconnect/NCentral
2. Open Active Directory while on the DC, you will be creating your new user based on their employment status provided on the New User Spec Form. Interns are traditionally in the EMPLOYEES OU, unless specified.
Basic OU Path:
Standard Employees: NALU.local > PEOPLE > EMPLOYEES
Consultants: NALU.local > PEOPLE > CONSULTANTS
3. Right click the requested OU, hover New, and select User.
4. Fill out the provided fields with the user’s information provided on the New User Ticket/Form. Usernames for NALU follow the [First Initial][Last Name] format. Adjust the domain to @nalumed.com. Hit next once complete.
5. If the user is a Consultant, please add (C) after their name
6. Create the user’s password based on the following format:
[NALU][Year][User First/Last Initials Lowercase][!]
Ex: NALU2022tc!
Select user must change password at next login option, hit Next once complete. Then Finish.
7. Locate your newly created user then right click and select “properties”.
8. Start With the user’s General Tab. Fill in the provided information for Description, Phone number, and email if provided on the New User Spec Form. If information was not provided on the New User Ticket/Form, leave blank.
Email should reflect the user’s username, then followed by @nalumed.com
Description will be the user’s job title – location (location is only if user is remote)
The following example is if the user was located in Texas.
Hit Apply once complete.
9. Select the Organization Tab and fill out each of the categories per the New User Spec Ticket/Form. Hit Apply once complete.
10. Go to Member Of Tab, add all requested security groups per the New User Spec Form, hit apply once filled out.
Most users will be requested to be added into the OOO Calendar, 5 Conference Rooms, and All Staff, these are their associated Security Group names:
- OOO Calendar – FS_OOO_Calendar_RW
- 5 Conference Rooms – SG_ConfRoom_RW
- All Staff – All Staff (All new users need this added)
11. Go to Profile Tab, Set Home Folder to Connect: H: To \\nalus1\users\%username%. Example in photo. Hit Apply once complete.
12. Go to “Attribute Editor” tab. Locate “mailNickname” and open it. Update the value to the New User’s username. Hit OK then Apply. Then OK again to close out of Active Directory.
13. Open up Powershell as Admin, run AD Sync Command.
Start-ADSyncSyncCycle -PolicyType Delta
If erroring out, wait the 30 minute sync time for 365 .
14. Go to portal.office.com and log in as the M365 Admin: ctac@nalumed.com
15. Open the Admin Portal on the left-hand side of the page. Then go to Users>Active Users and search for your newly created account.
16. Open their profile and assign a Business Standard license unless specified differently. If one is not available, reach out to Dylan Quiros. If DQ is not available, please reach out to a lead.
17. Once added/applied, hit save changes. Ensure all requested Groups and mailboxes are added within 365, based on the New User Spec Form / Ticket.
18. Next, the user needs to be added to MFA. To do this, login to Azure Active Directory.
19. A new window will open up and bring you into the Azure Active Directory Admin Center. From here click the User tab.
20. Then click Per-User MFA
21. Another window will open up and here you can select the user you need to add MFA. Click the user and select “enable”.
22. A pop up will appear asking you to enable multi-factor auth, select the button.
23. Once the MFA is successful, you can click close.
24. Next, go to https://cloudsyncit.com/auth/login/ in a new internet browser. Then log in with your personal work credentials.
25. Confirm that user now shows enabled
26. Select “All Organizations” on the left-hand side of the page.
27. Select the NALU Medical dropdown.
28. Go to the Settings Tab from the NALU Medical dashboard.
29. Select Auth.
30. Under NALU.local select “Import Users”.
31. Scroll down and expand the AD fields to locate the OU you originally created your New User in.
Most will follow the Active Directory > PEOPLE > EMPLOYEES (Or CONSULTANTS)
32. Locate your New User and check by their name. Then select Import Selected Users.
33. Allow the Import Results page to finish processing. Once it states successful, hit Ok.
34. This step may not update from AD/365 immediately, so you may have to return to this step prior to closing out the ticket.
From an internet browser, go to https://us2.proofpointessentials.com/app/login.php and log in with your personal Microsoft work account.
35. Once logged on, select Customer Management > Customers on the left-hand side. Then select Nalu Medical.
36. From the Nalu Medical dashboard, select User Management > Users. From here, search for your new user. If populated, all is good, if not, allow some time for Proofpoint to sync
If it does not automatically populate within the next hour. You will have to select the ADD A USER option on the screen, then fill out the information based on the User Spec Form/Ticket.
Note: Next Screenshot only applies if user does not populate. Fill out provided fields then hit Save once complete.
37. Open an incognito tab on your computer and go to portal.office.com
38. Log in as the new user, then test mailflow by sending an email to yourself, and replying to the email. Ensure you delete the emails from the user’s account once tested.
39. Send Creds to the POC via an encrypted email, confirm POC has received the credentials through the ticket.
40. Most new user’s will need to be “set up” remotely (This is not a provision, just ensuring their desktop profile is set up). Work with the POC to get the New User’s device connected through a ScreenConnect session, you may have to schedule yourself a time slot later to work on this device.
41. Once you have connected to the new device. Ensure the following has been completed
a. Login as User
b. Verify the localuser has been added onto the device
c. Verify NCentral connection
d. Run Windows Updates
e. Run Lenovo Vantage Updates
f. Login to Microsoft Office (64 bit)
g. Login to Microsoft Teams
h. Set-up Outlook Profile
i. Verify user has the Anyconnect VPN pinned to taskbar, with the NALU VPN URL saved for future connection. anyconnect.nalumed.com
j. Log onto CloudSync with the New User’s credentials, download app if not updated on computer
k. Set default printer based on New User Spec Form / Ticket
l. Set default apps, Mail – Outlook, Internet Browser – Chrome, PDF – Adobe Reader
m. Ensure Slack and Zoom are installed
n. Confirm QCDB is set up properly, all three tasks have been run
o. Ensure Power and Sleep settings are set back to 30 mins instead of never
PER MICHAEL, please double-check these steps:
* MFA: manually enable MFA for all users that are not Business Premium
* New Pwds for users - force new pwd for user to change pwd upon first login
* QCBD: Follow all 3 steps (eg. PDF workaround)
* Power & Sleep settings: Modify never sleep - back to 1 and 2 hours respectively
Referenced KB00002170 for computer setup.
42. Close ticket once confirmed with End User.
*Updated 1/06/23- HH