Account Management

The school manages a large collection of servers, workstations, virtual machines, mobile devices, cloud services, and networked applications. The management of accounts on these systems will follow all IU computing policies and industry best practices, including:

• End-User accounts on servers, workstations, and virtual machines will use IU ADS for authentication when possible.
• Non-IU personnel needing accounts on Luddy servers, workstations, and virtual machines will be added only after the creation of an IU Affiliate or Academic No-Pay account so the user has an IU username and ADS identity.
• When a group account owner requests addition of users to an existing group, ITG will request confirmation from the group owner that all existing group members should remain and will remove any members identified as no longer belonging in that group.
• Membership requests for group accounts must come from, or be approved by, the group account owner.
• User accounts will be removed within 1 month of when the IU login is disabled.

Given the unique computing requirements of computing research being done within the school, systems may need to run operating systems and software not supported by the Luddy ITG. Such cases are governed by the IT Policy: Administrator Access and Self-Managed Systems and local accounts on such systems might not be linked to IU ADS. In such cases, passphrases that meet IU passphrase requirements for length, complexity, and expiration will be used.

There are limited cases when the local Luddy account for a user is needed after the IU account is disabled (eg. continued research collaboration after a student graduates). In such cases, the sponsorship of an active member of the faculty is required and will be reviewed at least annually.