Attachment_0012_-_IAO_Express_Users_Guide.pdf

UNCLASSIFIED

i

UNCLASSIFIED

UNITED STATES AIR FORCE

Information Assurance Officer (IAO) Express Users

Guide

Version 2.10

IAO View

690 Network Support Squadron (NSS)/DOSB

22 Sep 2015

The IAO Express Users Guide contains essential instructions for the IAO to make full use of the information system. This guide includes a description of the system functions and capabilities, contingencies and alternate modes of operation and step-by-step procedures for system access and use.

i

Table of Contents

Overview

Access IAO Express

Create Request

User Account Requests – Provision

User Account Requests – Deprovision

User Account Requests – Move

User Account Requests – Permanent Change of Assignment (PCA)

User Account Requests – Provision Multiple

User Account Requests – Deprovision Multiple

User Account Requests – Move Multiple

User Account Requests – Unlock

User Account Requests – Manage Group Membership

User Account Requests – SharePoint Access

User Account Requests – Share Drive Access

User Account Requests – Enable/Disable

User Account Requests – Account (Acct) Validation

User Account Requests – Create Non-Air Force Account

User Account Requests – Properties

User Account Requests – Information Assurance (IA) Training Override

User Account Requests – Add a Personal Category Code (PCC) to a User Principal Name

(UPN)

Organizational Account Requests – Create

Organizational Account Requests – Delete

Organizational Account Requests – Properties

Organizational Account Requests – Membership

Distribution Group Requests – Create

Distribution Group Requests – Delete

Distribution Group Requests – Properties ii

Distribution Group Requests – Membership

Security Group Requests – Create

Security Group Requests – Delete

Security Group Requests – Properties

Security Group Requests – Membership

Computer Account Requests – Create

Computer Account Requests – Delete

Administrator Account Requests – Create

Administrator Account Requests – Delete

Administrator Account Requests – Properties

Administrator Account Requests – Enable/Disable

Administrator Account Requests – Unlock

Administrator Account Requests – Enable Personal Identity Verification (PIV)

My Requests

Abbreviations and Acronyms

Document Change Record iii

List of Figures

FIGURE 1. Accessing the Enterprise Service Desk (ESD) Portal

FIGURE 2. Enter Your Common Access Card (CAC) Personal Identification Number (PIN)

FIGURE 3. ESD Portal

FIGURE 4. ESD Portal > Communications Focal Point (CFP) > IAO Express

FIGURE 5. IAO REQUESTS Screen

FIGURE 6. IAO Requests > User Accounts Requests > Provision

FIGURE 7. Enter User’s Electronic Data Interchange - Personal Identifier (EDI-PI)

FIGURE 8. Results of Search Show in Bottom of Window Display

FIGURE 9. Selecting Appropriate Account to Provision

FIGURE 10. Warning Message of Pre-Existing Account Action

FIGURE 11. Provision a User Account Screen

FIGURE 12. Selecting Mailbox Category

FIGURE 13. Click Select Groups to Start Looking for Groups to Add to the User’s Account

FIGURE 14. Searching for Groups to Add to the User’s Account

FIGURE 15. Selecting Groups to Add to the User’s Account

FIGURE 16. Adding Selected Groups to a User’s Account

FIGURE 17. Selecting Groups to Remove from the User’s Account

FIGURE 18. Submitting the Request to Provision an Account

FIGURE 19. Warning Message of Pending Account Provisioning

FIGURE 20. Confirmation Message with Request Number

FIGURE 21. IAO Requests > User Accounts Requests > Deprovision

FIGURE 22. Enter User’s EDI-PI

FIGURE 23. Searching for the User’s Account

FIGURE 24. Selecting Appropriate Account to Deprovision

FIGURE 25. Warning Message of Pending Account Action

FIGURE 26. Verifying the Account Information

FIGURE 27. Submitting the Request to Deprovision an Account

FIGURE 28. Warning Message of Pending Account Deprovisioning

FIGURE 29. Confirmation Message with Request Number

FIGURE 30. IAO Requests > User Accounts Requests > Move

FIGURE 31. Enter User’s EDI-PI

FIGURE 32. Searching for the User’s Account and the Results of the Search

FIGURE 33. Selecting Appropriate Account to Move

FIGURE 34. Warning Message of Pre-Existing Account Action

FIGURE 35. Warning Message of Actions to be Performed on the Account if You Continue .. 20

FIGURE 36. Move a User Account Screen iv

FIGURE 37. Selecting Mailbox Category

FIGURE 38. Click Select Groups to Start Look for Groups to Add to the User’s Account

FIGURE 39. Searching for Groups to Add to the User’s Account

FIGURE 40. Selecting Groups to Add to the User’s Account

FIGURE 41. Adding Selected Groups to a User’s Account

FIGURE 42. Select the Group to Keep it from Being Added

FIGURE 43. Submitting the Move Request

FIGURE 44. Warning Message of Pending Account Action

FIGURE 45. Confirmation Message with Request Number

FIGURE 46. IAO Requests > User Accounts Requests > PCA

FIGURE 47. Enter User’s EDI-PI then Search for the Account

FIGURE 48. Results of the Search

FIGURE 49. No Accounts Found

FIGURE 50. Selecting Appropriate Account for a PCA

FIGURE 51. Warning Message of Actions to be Performed on the Account if You Continue .. 28

FIGURE 52. PCA a User Account Screen

FIGURE 53. Changing a Selection

FIGURE 54. Selecting Mailbox Category

FIGURE 55. Submitting the Request to PCA a User’s Account

FIGURE 56. Warning Message of Pending Account Action

FIGURE 57. Confirmation Message with Request Number

FIGURE 58. IAO Requests > User Accounts Requests > Provision Multiple Accounts

FIGURE 59. Directions for Provisioning Multiple Users

FIGURE 60. Enter Users’ EDI-PIs

FIGURE 61. Selecting Appropriate Base, if Applicable

FIGURE 62. Message Explaining the IAO Express is Verifying the Accounts

FIGURE 63. Results of the IAO Express Verifying Users’ Accounts

FIGURE 64. Accounts Eligible for Provisioning

FIGURE 65. Mandatory Information Fields Required to Provision Multiple Accounts

FIGURE 66. Selecting Mailbox Category

FIGURE 67. Optional Information Fields to Aid in Provisioning Multiple Accounts

FIGURE 68. Submitting the Request to Provision Multiple Accounts

FIGURE 69. Warning Message of Pending Account Action

FIGURE 70. Confirmation Message with Request Number

FIGURE 71. IAO Requests > User Accounts Requests > Deprovision Multiple Accounts

FIGURE 72. Warning Message Concerning Deprovisioning Multiple Users

FIGURE 73. Enter Users’ EDI-PIs

FIGURE 74. Selecting Appropriate Base, if Applicable

FIGURE 75. Message Explaining the IAO Express is Verifying the Accounts v

FIGURE 76. Results of the IAO Express Verifying Users’ Accounts

FIGURE 77. Continuing or Canceling the Mass Deprovision Request

FIGURE 78. Submitting Request to Deprovision Numerous User Accounts

FIGURE 79. Warning Message of Pending Account Action

FIGURE 80. Confirmation Message with Request Number

FIGURE 81. IAO Requests > User Accounts Requests > Move Multiple Accounts

FIGURE 82. Directions for Moving Multiple Users

FIGURE 83. Enter Users’ EDI-PIs

FIGURE 84. Selecting Appropriate Base, if Applicable

FIGURE 85. Message Explaining the IAO Express is Verifying the Accounts

FIGURE 86. Accounts Ineligible to be Moved

FIGURE 87. Too Few Account Eligible for this Function

FIGURE 88. Accounts Eligible for this Function

FIGURE 89. Selecting Appropriate Accounts to Move or Cancelling the Request

FIGURE 90. Mandatory Information Fields Required to Move Multiple Accounts

FIGURE 91. Mailbox Category Setting

FIGURE 92. Optional Information Fields to Aid in Moving Multiple Accounts

FIGURE 93. Submitting the Request to Move Multiple Accounts

FIGURE 94. Warning Message of Pending Mass Accounts Moves

FIGURE 95. Confirmation Message with Request Number

FIGURE 96. IAO Requests > User Accounts Requests > Unlock User’s Account

FIGURE 97. Enter User’s EDI-PI

FIGURE 98. Searching for the User’s Account and the Results of the Search

FIGURE 99. Selecting Appropriate Account to Unlock

FIGURE 100. Submitting the Request to Unlock an Account

FIGURE 101. Warning Message of Pending Account Action

FIGURE 102. Confirmation Message with Request Number

FIGURE 103. IAO Requests > User Accounts Requests > Manage Group Membership

FIGURE 104. Enter User’s EDI-PI

FIGURE 105. Searching for the User’s Account

FIGURE 106. No Accounts Found Matching Criteria Provided

FIGURE 107. Cancel or Reset your Search Criteria

FIGURE 108. The Results of a Successful Search

FIGURE 109. Selecting Appropriate Account to Add to or Remove from the Group

FIGURE 110. Groups the User is Already a Member of

FIGURE 111. Options to Add or Remove Groups

FIGURE 112. Option to Select Another User

FIGURE 113. Search Criteria

FIGURE 114. Selecting a Base for IAOs at Multiple Bases vi

FIGURE 115. Searching for the Group(s)

FIGURE 116. Selecting the Appropriate Group(s)

FIGURE 117. Groups Selected to be Added

FIGURE 118. Adding Groups or Cancelling the Request

FIGURE 119. Submitting the Membership Request to Add Groups from the Account

FIGURE 120. Warning Message of Pending Account Action

FIGURE 121. Confirmation Message with Request Number

FIGURE 122. Selecting Appropriate Group to Remove

FIGURE 123. Submitting the Request to Remove Groups from the Account

FIGURE 124. Warning Message of Pending Security Group Modification

FIGURE 125. Confirmation Message with Request Number

FIGURE 126. IAO Requests > User Accounts Requests > SharePoint Access

FIGURE 127. Enter User’s EDI-PI

FIGURE 128. Warning Message Concerning Dual-CAC Users

FIGURE 129. Searching for the User’s Account and the Results of the Search

FIGURE 130. Selecting the Appropriate Account for SharePoint Access

FIGURE 131. Single Role User View

FIGURE 132. Dual-Role User View

FIGURE 133. Submitting the Request to for SharePoint Access

FIGURE 134. Warning Message of Pending Account Action

FIGURE 135. Confirmation Message with Request Number

FIGURE 136. IAO Requests > User Accounts Requests > Share Drive Access

FIGURE 137. Selecting OK if the Access is Controlled by a Security Group

FIGURE 138. Advisory Message for Approved Method to Add Users to a Security Group

FIGURE 139. Selecting OK if the Access is Controlled by a Security Group or Unknown

FIGURE 140. Share Drive Access Screen

FIGURE 141. Full Path to the Desired Directory

FIGURE 142. Adding Users Requiring Access to the Share Drive

FIGURE 143. Enter User’s EDI-PI then Search for the Account

FIGURE 144. Selecting Appropriate Account for Share Drive Access

FIGURE 145. Submitting the Request for Share Drive Access

FIGURE 146. Warning Message of Pending Account Action

FIGURE 147. Confirmation Message with Request Number

FIGURE 148. IAO Requests > User Accounts Requests > Enable or Disable User’s Account . 77

FIGURE 149. Enter User’s EDI-PI

FIGURE 150. Searching for the User’s Account and the Results of the Search

FIGURE 151. Selecting Appropriate Account to Enable or Disable

FIGURE 152. User’s Information

FIGURE 153. Enable or Disable Drop-Down Menu vii

FIGURE 154. Submitting the Request to Enable or Disable the Account

FIGURE 155. Warning Message of Pending Account Action

FIGURE 156. Confirmation Message with Request Number

FIGURE 157. IAO Requests > User Account Requests > Acct Validation

FIGURE 158. Enter User’s EDI-PI

FIGURE 159. No Users Match Search Criteria

FIGURE 160. Resetting Search Criteria or Cancelling the Request

FIGURE 161. Select the Appropriate Account

FIGURE 162. Validate a User Account Screen

FIGURE 163. Warning Message of Pending Account Action

FIGURE 164. Select the Appropriate Account

FIGURE 165. IAO Requests > User Account Requests > Create Non-Air Force Account

FIGURE 166. Enter User’s EDI-PI

FIGURE 167. Selecting Appropriate Non-Air Force (AF) Account

FIGURE 168. Screen to Verify the Account Selected is the Appropriate Account

FIGURE 169. Screen Verifying Request was Submitted

FIGURE 170. IAO Requests > User Accounts Requests > Modify a User Account’s Properties

FIGURE 171. Enter User’s EDI-PI

FIGURE 172. Searching for Appropriate Account for Properties Modification

FIGURE 173. Selecting Appropriate Account for Properties Modification

FIGURE 174. Update User Account Properties Screen

FIGURE 175. Selecting Add Workstations

FIGURE 176. Entering Computer’s Name and the Search for the Machine

FIGURE 177. Selecting the Appropriate Computer

FIGURE 178. Accepting or Canceling the Workstation Addition

FIGURE 179. Selecting Add Workstations

FIGURE 180. Selecting Machine(s) to Remove from the User’s Account

FIGURE 181. For a Logon Script, Enter the Full Name and Network Path

FIGURE 182. For a Home Directory, Enter the Full Network Path

FIGURE 183. Selecting the Home Directory Drive Letter

FIGURE 184. Entering IA Date

FIGURE 185. Warning Message Concerning IA Training

FIGURE 186. Selecting IA Date

FIGURE 187. Changing a User’s Dormant Account Status

FIGURE 188. Selecting User’s Status as Temporary Duty (TDY) or Leave

FIGURE 189. Selecting Adding Recipient

FIGURE 190. Enter User’s EDI-PI then Search for the Account

FIGURE 191. Selecting the Appropriate Account and Accepting or Canceling the Change viii

FIGURE 192. Removing a Recipient

FIGURE 193. Option to Add Delivery Restrictions

FIGURE 194. Enter User’s EDI-PI then Search for the Account

FIGURE 195. Selecting the Appropriate User’s Account

FIGURE 196. Option to Remove Delivery Restrictions

FIGURE 197. Selecting Specific Restrictions

FIGURE 198. Submitting the Request to Modify the User’s Account

FIGURE 199. Warning Message of Pending Account Action

FIGURE 200. Confirmation Message with Request Number

FIGURE 201. IAO Requests > User Accounts Requests > IA Training Override

FIGURE 202. Enter User’s EDI-PI

FIGURE 203. Search Results

FIGURE 204. Selecting Appropriate Account for IA Training Override

FIGURE 205. User’s Account Information

FIGURE 206. Submitting the Request to Override a User’s IA Training Date

FIGURE 207. Confirmation Message with Request Number

FIGURE 208. IAO Requests > User Accounts Requests > Add a PCC to a User’s UPN

FIGURE 209. Enter User’s EDI-PI

FIGURE 210. Search Results

FIGURE 211. Selecting Appropriate Account to Change the PCC in the UPN

FIGURE 212. User’s Account Information

FIGURE 213. Warning Message of Pending Account Action

FIGURE 214. Confirmation Message with Request Number

FIGURE 215. IAO Requests > Organizational Accounts Requests > Create

FIGURE 216. An Organizational Account’s Properties

FIGURE 217. Selecting an Account Manager for the Organization Box

FIGURE 218. Enter User’s EDI-PI then Search for the Account

FIGURE 219. Selecting the Appropriate User’s Account

FIGURE 220. Selecting Members of the Organization Account

FIGURE 221. Enter User’s EDI-PI then Search for the Account

FIGURE 222. Selecting the Appropriate User’s Account

FIGURE 223. Submitting the Request to Create an Organizational Account

FIGURE 224. Warning Message of Pending Account Action

FIGURE 225. Confirmation Message with Request Number

FIGURE 226. IAO Requests > Organizational Account Requests > Delete

FIGURE 227. Entering the Distribution Group’s Name to Search for

FIGURE 228. Search Results

FIGURE 229. Selecting the Distribution Group

FIGURE 230. Submitting the Request to Delete the Organizational Account ix

FIGURE 231. Warning Message of Pending Account Action

FIGURE 232. Confirmation Message with Request Number

FIGURE 233. IAO Requests > Organizational Accounts Requests > Properties

FIGURE 234. Entering the Organizational Account’s Name to Search for

FIGURE 235. Searching for the Organizational Account and the Results of the Search

FIGURE 236. Selecting the Appropriate Organizational Account

FIGURE 237. Organizational Account’s Information

FIGURE 238. Selecting an Account Owner

FIGURE 239. Enter User’s EDI-PI then Search for the Account

FIGURE 240. Selecting the Appropriate User’s Account

FIGURE 241. Submitting the Request to Update the Organizational Account

FIGURE 242. Warning Message of Pending Account Action

FIGURE 243. Confirmation Message with Request Number

FIGURE 244. IAO Requests > Organizational Accounts Requests > Membership

FIGURE 245. Searching for the Organizational Account

FIGURE 246. Entering the Organizational Account’s Name then Search for the Account

FIGURE 247. Selecting Appropriate Organizational Account

FIGURE 248. Organizational Account’s Information

FIGURE 249. Adding Full Access Members

FIGURE 250. Enter User’s EDI-PI then Search for the Account

FIGURE 251. Selecting Members of the Organization Account

FIGURE 252. Removing Members from the Organizational Account

FIGURE 253. Adding Send As/Receive Permissions for Members

FIGURE 254. Enter User’s EDI-PI then Search for the Account

FIGURE 255. Selecting Appropriate Account to Add to the Organizational Account

FIGURE 256. Removing Send As/Receive Permissions for a Member

FIGURE 257. Selecting Appropriate Account to Add to the Organizational Account

FIGURE 258. Enter User’s EDI-PI then Search for the Account

FIGURE 259. Selecting Appropriate Account to Add to the Organizational Account

FIGURE 260. Selecting Appropriate Account to Remove from the Organizational Account .. 128

FIGURE 261. Adding Delivery Restrictions to an Organizational Account

FIGURE 262. Enter User’s EDI-PI then Search for the Account

FIGURE 263. Selecting Appropriate Account to Add to the Organizational Account

FIGURE 264. Removing Delivery Restrictions to an Organizational Account

FIGURE 265. Selecting Delivery Restrictions from the Drop-Down Menu

FIGURE 266. Submitting the Request to Modify an Organizational Account

FIGURE 267. Warning Message of Pending Account Action

FIGURE 268. Confirmation Message with Request Number

FIGURE 269. IAO Requests > Distribution Group Requests > Create x

FIGURE 270. Distribution Account Properties

FIGURE 271. Selecting An Account Owner for the Distribution List

FIGURE 272. Enter User’s EDI-PI

FIGURE 273. Selecting the Appropriate User’s Account to be the Account Owner

FIGURE 274. Selecting Members for the Distribution List

FIGURE 275. Enter User’s EDI-PI then Search for the Account

FIGURE 276. Selecting the Account(s) and Adding It or Them to the Distribution Group

FIGURE 277. Selecting Organizational (Org) Accounts for the Distribution List

FIGURE 278. Entering Search Criteria

FIGURE 279. Selecting Search to Search for the Org Account

FIGURE 280. Selecting the Appropriate Org Account

FIGURE 281. Selecting OK or Cancel

FIGURE 282. Submitting the Create Distribution Group Request

FIGURE 283. Warning Message of Pending Account Deletion

FIGURE 284. Confirmation Message with Request Number

FIGURE 285. IAO Requests > Distribution Group Requests > Delete

FIGURE 286. Entering the Distribution Group’s Name to Search for

FIGURE 287. Searching for the Distribution Group and the Results of the Search

FIGURE 288. Selecting the Appropriate Distribution Group

FIGURE 289. Submitting the Request to Delete a Distribution Group

FIGURE 290. Warning Message of Pending Distribution Group Deletion

FIGURE 291. Confirmation Message with Request Number

FIGURE 292. IAO Requests > Distribution Group Requests > Properties

FIGURE 293. Entering the Distribution Group’s Name to Search for

FIGURE 294. Searching for the Distribution Group

FIGURE 295. Selecting the Appropriate Distribution Group

FIGURE 296. Distribution Group’s Information

FIGURE 297. Selecting an Account Owner for the Distribution Group

FIGURE 298. Enter User’s EDI-PI then Search for the Account

FIGURE 299. Selecting the Appropriate User’s Account

FIGURE 300. Submitting the Request to Modify a Distribution Group’s Owner

FIGURE 301. Warning Message of Pending Distribution Group Owner Change

FIGURE 302. Confirmation Message with Request Number

FIGURE 303. IAO Requests > Distribution Group Requests > Memberships

FIGURE 304. Entering the Distribution Group’s Name to Search for

FIGURE 305. Searching for the Distribution Group

FIGURE 306. Selecting the Appropriate Distribution Group

FIGURE 307. Distribution Group’s Information

FIGURE 308. Adding Members to the Distribution Group xi

FIGURE 309. Enter User’s EDI-PI then Search for the Account

FIGURE 310. Selecting the Account(s) and Adding It or Them to the Distribution Group

FIGURE 311. Search Criteria

FIGURE 312. Selecting the Appropriate Org Account

FIGURE 313. Selecting OK or Cancel

FIGURE 314. Selecting Accounts to Remove from the Distribution Group

FIGURE 315. Submitting the Request to Modify a Distribution Group’s Membership

FIGURE 316. Warning Message of Pending Group Modification

FIGURE 317. Confirmation Message with Request Number

FIGURE 318. IAO Requests > Security Group Requests > Create

FIGURE 319. Create a New Security Group Screen

FIGURE 320. Click Select Account Owner to Start Look for the Account Owner

FIGURE 321. Enter User’s EDI-PI then Search for the Account

FIGURE 322. Selecting Appropriate Account to be the Account Owner

FIGURE 323. Selecting Users’ Accounts to Add to the Security Group

FIGURE 324. Searching for the User’s Account and the Results of the Search

FIGURE 325. Selecting the Appropriate User’s Account(s) to be Added to the Group

FIGURE 326. Submitting the Request to Create a Security Group

FIGURE 327. Warning Message of Pending Security Group Creation

FIGURE 328. Confirmation Message with Request Number

FIGURE 329. IAO Requests > Security Group Requests > Delete

FIGURE 330. Entering the Security Group’s Name

FIGURE 331. Searching for the Security Group’s Account and the Results of the Search

FIGURE 332. Selecting the Appropriate Security Group

FIGURE 333. Submitting the Request to Delete a Security Group

FIGURE 334. Warning Message of Pending Security Group Deletion

FIGURE 335. Confirmation Message with Request Number

FIGURE 336. IAO Requests > Security Group Requests > Properties

FIGURE 337. Entering the Security Group’s Common Name

FIGURE 338. Refine Search Parameters

FIGURE 339. Selecting the Appropriate Security Group

FIGURE 340. A Non-Mail-Enabled Security Group’s Information

FIGURE 341. Mail-Enabling a Security Group

FIGURE 342. Mail-Enabling Warning Message

FIGURE 343. Additional Properties for Mail-Enabled Security Groups

FIGURE 344. Selecting The Organization

FIGURE 345. Selecting an Account Owner

FIGURE 346. Enter User’s EDI-PI

FIGURE 347. Selecting Appropriate User’s Account as the Owner of the Security Group xii

FIGURE 348. Selecting an Account Co-Owner

FIGURE 349. Enter User’s EDI-PI

FIGURE 350. Selecting Appropriate User’s Account as the Co-Owner of the Security Group 170

FIGURE 351. Selecting Co-Owner(s) of the Security Group

FIGURE 352. Removing a Co-Owner(s) of the Security Group

FIGURE 353. Submitting the Request to Update a Security Group’s Properties

FIGURE 354. Warning Message of Pending Account Action

FIGURE 355. Confirmation Message with Request Number

FIGURE 356. IAO Requests > Security Group Requests > Membership

FIGURE 357. Entering the Security Group’s Name

FIGURE 358. Searching for the Security Group

FIGURE 359. Selecting the Appropriate Security Group

FIGURE 360. Security Group’s Member List

FIGURE 361. Adding Members to a Security Group

FIGURE 362. Enter User’s EDI-PI then Search for the Account

FIGURE 363. Selecting the Appropriate User’s Account

FIGURE 364. Select a User’s Account and Click Remove Members

FIGURE 365. Submitting the Request to Update the Security Group Membership

FIGURE 366. Warning Message of Pending Account Action

FIGURE 367. Confirmation Message with Request Number

FIGURE 368. IAO Requests > Computer Account Requests > Create

FIGURE 369. Create Computer Account Request Screen

FIGURE 370. Submitting the Request to Create a Computer Account

FIGURE 371. Warning Message of Pending Account Action

FIGURE 372. Confirmation Message with Request Number

FIGURE 373. IAO Requests > Computer Account Requests > Delete

FIGURE 374. Entering the Computer Name to be Deleted

FIGURE 375. Searching for the Computer to be Deleted

FIGURE 376. Selecting the Appropriate Computer Account

FIGURE 377. Submitting the Request to Delete a Computer Account

FIGURE 378. Warning Message of Pending Account Action

FIGURE 379. Confirmation Message with Request Number

FIGURE 380. IAO Requests > Administrator Account Requests > Create

FIGURE 381. Enter User’s EDI-PI

FIGURE 382. Searching for the User’s Account and the Results of the Search

FIGURE 383. Selecting Appropriate Account

FIGURE 384. Message Indicating an Administrator Account Already Exists for this User

FIGURE 385. Submitting the Request to Create an Administrator Shell Account

FIGURE 386. Warning Message of Pending Account Action xiii

FIGURE 387. Confirmation Message with Request Number

FIGURE 388. IAO Requests > Administrator Account Requests > Delete

FIGURE 389. Enter User’s EDI-PI

FIGURE 390. Searching for the User’s Account and the Results of the Search

FIGURE 391. Selecting Appropriate Administrator Account to Delete

FIGURE 392. Submitting the Request to Delete the Administrator Account

FIGURE 393. Warning Message of Pending Account Deletion

FIGURE 394. Confirmation Message with Request Number

FIGURE 395. IAO Requests > Administrator Account Requests > Properties

FIGURE 396. Enter User’s EDI-PI

FIGURE 397. Searching for the User’s Account and the Results of the Search

FIGURE 398. Selecting Appropriate Administrator Account to Modify

FIGURE 399. Verifying the Account Information

FIGURE 400. Submitting the Request to Update the Administrator Account

FIGURE 401. Warning Message of Pending Account Action

FIGURE 402. Confirmation Message with Request Number

FIGURE 403. IAO Requests > Administrator Account Requests > Enable/Disable

FIGURE 404. Enter User’s EDI-PI

FIGURE 405. Enter User’s EDI-PI then Search for the Account

FIGURE 406. Selecting Appropriate Account to Enable or Disable

FIGURE 407. Verifying the Appropriate Administrator Account

FIGURE 408. Selecting Enable or Disable

FIGURE 409. Submitting the Request to Enable or Disable the Administrator’s Account

FIGURE 410. Warning Message of Pending Account Action

FIGURE 411. Confirmation Message with Request Number

FIGURE 412. IAO Requests > Administrator Account Requests > Unlock

FIGURE 413. Enter User’s EDI-PI

FIGURE 414. Enter User’s EDI-PI then Search for the Account

FIGURE 415. Selecting the Account to Unlock

FIGURE 416. Submitting the Request to Unlock the Administrator Account

FIGURE 417. Warning Message of Pending Account Action

FIGURE 418. Confirmation Message with Request Number

FIGURE 419. IAO Requests > Administrator Account Requests > Enable PIV

FIGURE 420. Enter User’s EDI-PI

FIGURE 421. Searching for the User’s Account and the Results of the Search

FIGURE 422. Selecting Appropriate Administrator Account for PIV-Enabling

FIGURE 423. Message Indicating the Account is Already PIV-Enabled

FIGURE 424. No Administrator Account Found

FIGURE 425. Messaging Indicating Pending Action xiv

FIGURE 426. Submitting the Request to PIV-Enable the Administrator Account

FIGURE 427. Confirmation Message with Request Number

FIGURE 428. IAO Requests > My Requests

FIGURE 429. Filtering Incidents

FIGURE 430. Incident Details

ESD Self Help Portal

IAO EXPRESS USERS GUIDE

IAO VIEW

Overview

The IAO Express is an automation request tool IAOs can use to provision, deprovision or move various Air Force Information Network (AFIN) accounts. IAOs can also use this tool to create organizational (Org), distribution (distro), administration (admin) and security group accounts.

This guide describes the different aspects and options within IAO Express.

NOTE

The ESD will no longer accept Non-Secure Internet Protocol Router (NIPR) account management tickets for the items listed on the Table of Contents (TOC) via phone or Remedy unless they are regarding a Very Important Person (VIP) or for requests not available on IAO

Express.

NOTE

Since Air National Guard (ANG) members use Defense Information Systems Agency (DISA) exchange resources, ANG IAOs will see messages on various menus if they attempt to perform actions in IAO Express that involve AFIN exchange. Either a pop-up message will display or exchange-related fields will be grayed out as appropriate.

Access IAO Express

NOTE

There is no way to expedite an IAO Express Request as it is an automated system. For assistance with the IAO Express, please contact the IAO Express Support Team at

IAO_Express_Support@us.af.mil.

To submit a form using IAO express you must access the ESD Self Help portal using the below method:

1. Access the ESD Self Help Portal

a. After reviewing the information, click I Agree to access the site.

https://esd.us.af.mil/

b. The Windows Security screen may display to validate the user’s identity. Please select the DOD CA-xx certificate and click OK. This example reflects a Department of

Defense (DoD) Certificate Authority (CA)-30 certificate.

FIGURE 1. Accessing the Enterprise Service Desk (ESD) Portal

c. If required, enter your CAC Pin and then click OK.

FIGURE 2. Enter Your Common Access Card (CAC) Personal Identification Number (PIN)

2. Initially after logging in, the Main ESD Portal Screen displays, as shown below:

FIGURE 3. ESD Portal

3. Hover the mouse pointer over the Communications Focal Point (CFP) tab and select IAO

Express from the drop-down list.

FIGURE 4. ESD Portal > Communications Focal Point (CFP) > IAO Express

4. A new page labeled IAO REQUESTS will be displayed.

FIGURE 5. IAO REQUESTS Screen

In addition to a link to this User Guide, two (2) options will appear: Create Request and My

Requests. By default, the page will be automatically set to the Create Request option.

Create Request

This section details the steps necessary to generate a user account (i.e., Provision, Move and

Deprovision), organizational account, group account (i.e., security and distro) or computer request. This will create a request that will be submitted to the Enterprise Service Desk for appropriate processing. All requested entry fields must be completed prior to submitting the request. Once a technician has accepted the request, it will be transferred to a Remedy incident.

User Account Requests – Provision

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, select Provision.

FIGURE 6. IAO Requests > User Accounts Requests > Provision

2. Enter the user’s Electronic Data Interchange - Personal Identifier (EDI-PI) in the EDI field.

FIGURE 7. Enter User’s Electronic Data Interchange - Personal Identifier (EDI-PI)

Searching by users’ EDI-PIs will narrow results better than searching by their first and/or last names. For accuracy, it is recommended you search for users by their EDI-PIs.

3. Once the search criteria has been entered, click the Search button. Results for the requested search will be displayed.

FIGURE 8. Results of Search Show in Bottom of Window Display

4. Click select next to the appropriate user account. If more than one account is populated with the same EDI-PI, select the user’s correct role (i.e., C-Civilian, V-Reservist, E-

Contractor, N-National Guard, etc.).

FIGURE 9. Selecting Appropriate Account to Provision

A notice message will populate if you select a user that has a pending Provision, Move or

Deprovision request already submitted. Click OK.

FIGURE 10. Warning Message of Pre-Existing Account Action

5. After selecting the proper user, a page will display the user’s properties and a series of fields. Verify the correct user is identified by reviewing the prepopulated information (i.e., Name, Title, EDI-PI, Personnel Type and Logon Name). Fields identified with an asterisk (*) are mandatory.

a. Required fields include:

(1) Base

(2) Provision With Email

(3) DoD Component (Branch)

(4) DoD Sub-Component (Major Command (MAJCOM))

(5) Organization

(6) Office Symbol

(7) Defense Switched Network (DSN) Number

b. Optional fields include:

(1) Position Title

(2) Commercial

(3) Fax Numbers

(4) Street Address

(5) State/Province

(6) Zone Improvement Plan (ZIP) Code

(7) Login Script

(8) Home Drive Path

(9) Home Directory Drive Letter

NOTE

IAOs ONLY have the ability to provision to THEIR respective Base or Geographically

Separated Unit (GSU). IAOs that are members of multiple Universal Distribution Groups

(UDG), that is, UDG_BaseName_IAO, will be able to select the appropriate base using the Base drop-down list.

FIGURE 11. Provision a User Account Screen

If you select an erroneous user account, click Change Selection. This will prompt you to enter and search for the appropriate user account.

6. You will need to select a mailbox category or size.

FIGURE 12. Selecting Mailbox Category

The numbers (3), (2) and (1) reflect the mailbox categories spelled out in Technical Order (TO)

00-33D-2001, Active Directory Naming Conventions.

7. To add a user to groups, click Select Groups under Group Membership.

FIGURE 13. Click Select Groups to Start Looking for Groups to Add to the User’s Account

8. Type the name of the group you wish to add the user to in the Display Name field, then click Search.

FIGURE 14. Searching for Groups to Add to the User’s Account

You can search for groups by using exact or relative words. Select exact or contains in the drop-down list next to the Search button. When selecting the contains option a warning message will display: “WARNING: Conducting a search using contains may result in long search times (>1 min.). It is recommended to use an exact match.” The contains option will display the first 20 groups. If the relevant group is not found in the first 20 groups displayed, attempt to enter a specific group name.

9. Once the relevant groups are identified, click select to apply group(s) to the user account.

FIGURE 15. Selecting Groups to Add to the User’s Account

10. After clicking select, the group will appear over the Display Name field. Click OK.

FIGURE 16. Adding Selected Groups to a User’s Account

11. To remove a group from selection, click on the erroneous Group Name under Group

Membership. This will automatically remove the group from the list.

FIGURE 17. Selecting Groups to Remove from the User’s Account

12. Once all the information has been verified, click Submit Provision Request.

FIGURE 18. Submitting the Request to Provision an Account

13. A warning message will appear on the screen. After reviewing the message, click OK to continue or Cancel to abort the request.

FIGURE 19. Warning Message of Pending Account Provisioning

14. A message will be displayed confirming submission. The message will include a request number for tracking purposes. After reviewing the confirmation message and noting the request number, click OK.

FIGURE 20. Confirmation Message with Request Number

User Account Requests – Deprovision

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, click Deprovision.

FIGURE 21. IAO Requests > User Accounts Requests > Deprovision

2. After clicking Deprovision, a new screen will populate. Enter the user’s EDI-PI in the

EDI field.

FIGURE 22. Enter User’s EDI-PI

Searching by users’ EDI-PIs will narrow results better than searching by their first and/or last names. For accuracy, it is recommended you search for users by their EDI-PIs.

FIGURE 23. Searching for the User’s Account

4. Click select next to the appropriate user account. If more than one account is populated with the same EDI-PI, select the user’s correct role (i.e., .C-Civilian, .V-Reservist, .E-

Contractor, .N-National Guard, etc.).

FIGURE 24. Selecting Appropriate Account to Deprovision

Deprovision request already submitted.

FIGURE 25. Warning Message of Pending Account Action

5. After selecting the proper user, a page will display the user’s properties and a series of fields. Verify the correct user is identified by reviewing the prepopulated information (i.e., Name, Title, EDI-PI, Personnel Type and Logon Name).

FIGURE 26. Verifying the Account Information

6. Once all the information has been verified, click Submit Deprovision Request.

FIGURE 27. Submitting the Request to Deprovision an Account

7. A warning message will appear on the screen. After reviewing the message, click OK to

FIGURE 28. Warning Message of Pending Account Deprovisioning

8. A message will be displayed confirming submission. The message will include a request

FIGURE 29. Confirmation Message with Request Number

User Account Requests – Move

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, click Move.

FIGURE 30. IAO Requests > User Accounts Requests > Move

2. After clicking Move, a new screen will populate. Enter the user’s EDI-PI in the EDI field.

FIGURE 31. Enter User’s EDI-PI

FIGURE 32. Searching for the User’s Account and the Results of the Search

4. Click select next to the appropriate user account. If more than one account is populated with the same EDI-PI, select the user’s correct role (i.e., C-Civilian, V-Reservist, E-

Contractor, N-National Guard, etc.).

FIGURE 33. Selecting Appropriate Account to Move

Deprovision request already submitted. After reading the message, click OK.

FIGURE 34. Warning Message of Pre-Existing Account Action

5. A notice message explaining what actions will happen to the account will appear. After reading the message, click OK.

FIGURE 35. Warning Message of Actions to be Performed on the Account if You Continue

6. After selecting the proper user, a page will display the user’s properties and a series of fields. Verify the correct user is identified by reviewing the prepopulated information (i.e., Name, Title, EDI-PI, Personnel Type and Logon Name). Fields identified with an asterisk (*) are mandatory.

a. Required fields include:

(1) New Mailbox Category

(2) Move to Base

(3) DoD Component (Branch)

(4) DoD Sub-Component (MAJCOM)

(5) Organization

(6) Office Symbol

(7) DSN Number

b. Optional fields include:

(1) Position Title

(2) Commercial Number

(3) Fax Number

(4) Street Address

(5) State/Province

(6) ZIP Code

(7) Description

(8) Group Membership

(9) Logon Script

(10) Home Drive Path

(11) Home Directory Drive Letter

IAOs ONLY have the ability to provision to THEIR respective Base or GSU. IAOs that are members of multiple distro groups (i.e., UDG_BaseName_IAO) will be able to select the appropriate base using the Base drop-down list.

FIGURE 36. Move a User Account Screen

NOTE

If you select an erroneous user account, click Change Selection. This will prompt you to enter and search for the appropriate user account.

7. You will need to select a mailbox category or size even if the mailbox category is not changing.

FIGURE 37. Selecting Mailbox Category

If the user has a mailbox and you select (0) No, the user’s current mailbox will be removed and the user will lose all existing emails.

NOTE

The numbers (3), (2) and (1) reflect the mailbox categories spelled out in TO 00-33D-2001.

8. To add the user to groups, click Select Groups under Group Membership.

FIGURE 38. Click Select Groups to Start Look for Groups to Add to the User’s Account

9. Type the name of the group you wish to add the user to in the Display Name field. Click

Search.

FIGURE 39. Searching for Groups to Add to the User’s Account

NOTE

Groups can be searched by using exact or relative words. Select exact or contains in the drop-down list next to the Search button. When selecting the contains option a warning message will display: “WARNING: Conducting a search using contains may result in long search times (>1 min.). It is recommended to use an exact match.” The contains option will display the first 20 groups. If the relevant group is not found in the first 20 groups displayed, attempt to enter a specific group name.

10. Once you have identified the relevant groups, click select to apply group(s) to the user’s account.

FIGURE 40. Selecting Groups to Add to the User’s Account

11. Once select has been selected, the group will appear over the Display Name field. Click

OK.

FIGURE 41. Adding Selected Groups to a User’s Account

12. To remove a group from selection, click on the erroneous Group Name under Group

Membership. This will automatically remove the group from the list.

FIGURE 42. Select the Group to Keep it from Being Added

13. Once you have verified the information you wish to submit, click Submit Move Request.

FIGURE 43. Submitting the Move Request

14. A warning message will appear on the screen. After reviewing the message, click OK to

FIGURE 44. Warning Message of Pending Account Action

15. A message will be displayed confirming submission. The message will include a request

FIGURE 45. Confirmation Message with Request Number

User Account Requests – Permanent Change of Assignment (PCA)

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, click PCA.

FIGURE 46. IAO Requests > User Accounts Requests > PCA

2. After clicking PCA, a new screen will populate. Enter the user’s EDI-PI in the EDI field.

FIGURE 47. Enter User’s EDI-PI then Search for the Account

FIGURE 48. Results of the Search

NOTE

IAOs ONLY have the ability to perform this action on users on THEIR respective Base or GSU.

If the search criteria you provided does not find anyone in area of responsibility, you will receive a notification in the results area. Click Reset to clear the search criteria or Cancel to cancel the request.

FIGURE 49. No Accounts Found

4. If there are accounts fitting the search criteria, click select next to the appropriate user account. If more than one account is populated with the same EDI-PI, select the user’s correct role (i.e., .C-Civilian, .V-Reservist, .E-Contractor, .N-National Guard, etc.).

FIGURE 50. Selecting Appropriate Account for a PCA

5. A notice message will populate reminding you that you are about to perform a PCA on the selected account and what that entails. Verify the information and click OK.

FIGURE 51. Warning Message of Actions to be Performed on the Account if You Continue

6. After selecting the appropriate user’s account, a page will display the user’s properties and a series of fields. Verify the correct user is selected by reviewing the prepopulated information (i.e., Personnel Type, EDI-PI, Name and Rank). Fields identified with an asterisk (*) are mandatory.

a. Required fields include:

(1) Mailbox Category

(2) DoD Component (Branch)

(3) DoD Sub-Component (MAJCOM)

(4) Organization

(5) Office Symbol

(6) DSN Number

b. Optional fields include:

(1) Position Title

(2) Commercial Number

(3) Fax Number

(4) Group Membership

(5) Street Address

(6) State/Province

(7) ZIP Code

(8) Logon Script Path

(9) Home Drive Path

(10) Home Directory Drive Letter

FIGURE 52. PCA a User Account Screen

NOTE

If you select an erroneous user account, click Change Selection at the top of the user’s information. This will prompt you to enter and search for the appropriate user account.

FIGURE 53. Changing a Selection

You will need to select a mailbox category or size to be added to the user’s account. If the user has a mailbox and you select (0) No, the user’s current mailbox will be removed and the user will lose all existing emails. The numbers (3), (2) and (1) reflect the mailbox categories spelled out in TO 00-33D-2001.

FIGURE 54. Selecting Mailbox Category

7. When you have modified the account appropriately, click the Submit Permanent Change of Assignment Request button at the bottom of the user’s information.

FIGURE 55. Submitting the Request to PCA a User’s Account

8. A warning message will appear on the screen. After reviewing the message, click OK to

FIGURE 56. Warning Message of Pending Account Action

9. A message will be displayed confirming submission. The message will include a request

FIGURE 57. Confirmation Message with Request Number

User Account Requests – Provision Multiple

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, select Provision

Multiple.

FIGURE 58. IAO Requests > User Accounts Requests > Provision Multiple Accounts

2. A message will appear on the screen explaining that you are about to start the process for provisioning multiple users from a base you have IAO permissions to. Click OK.

FIGURE 59. Directions for Provisioning Multiple Users

a. You will be able to provision between three (3) and 100 accounts at one time.

b. All accounts must be for the same Organization and have the same Office Symbol (e.g., 690 NSS/DOEO).

c. Additional shared properties can be set (e.g., Login Scripts, Home Directories, etc.).

d. This action is only good for accounts in the Peoples Organization Unit (OU). Accounts currently provisioned to other bases will need either to be deprovisioned first then provisioned or if possible, moved.

NOTE

This function can only be performed by using the customers’ EDI-PIs.

3. In the Provision Multiple Accounts screen, cut-and-paste the EDI-PIs from another document as shown below.

FIGURE 60. Enter Users’ EDI-PIs

4. From the Base drop-down menu select the base you are provisioning the accounts to, then select Next.

FIGURE 61. Selecting Appropriate Base, if Applicable

5. A message will appear informing you the system is checking the accounts to determine if they are able to be provisioned to the gaining base or not. After reviewing the message, click, OK.

FIGURE 62. Message Explaining the IAO Express is Verifying the Accounts

6. If any of the accounts are ineligible for provisioning for any reason, the next pop-up window will let you know at the top of the message.

FIGURE 63. Results of the IAO Express Verifying Users’ Accounts

7. Listed in the middle of the message are the accounts that are eligible for provisioning.

8. If you entered an insufficient number of accounts for provisioning, the message will inform you of this at the bottom of the window.

9. Click OK.

10. A new window will appear with all of the accounts eligible for provisioning. You should verify the names again at this point. If necessary, you will be able to scroll through this list.

11. Once you have finished verifying the list, select OK to continue or Cancel to stop the process at this point.

FIGURE 64. Accounts Eligible for Provisioning

12. The next window will prompt you for additional information.

a. Enter mandatory information (i.e., Provision with email, MAJCOM, Organization, Office

Symbol and DSN) in appropriate fields in the top section of this window.

FIGURE 65. Mandatory Information Fields Required to Provision Multiple Accounts

You will need to select a mailbox category or size to be added to all of the user accounts. The numbers (3), (2) and (1) reflect the mailbox categories spelled out in TO 00-33D-2001.

FIGURE 66. Selecting Mailbox Category

b. Enter any additional shared information (e.g., commercial number, fax number, etc.) in the appropriate fields in the lower section of this window.

FIGURE 67. Optional Information Fields to Aid in Provisioning Multiple Accounts

13. Once all the necessary information has been entered, click Submit Mass Provision

Request.

FIGURE 68. Submitting the Request to Provision Multiple Accounts

14. A message will pop-up informing you that you are about to submit a request to provision multiple users. Click OK to continue or Cancel to stop the process.

FIGURE 69. Warning Message of Pending Account Action

15. A final message will pop-up informing you of the number of accounts you submitted along with the corresponding range of request numbers. Click OK.

FIGURE 70. Confirmation Message with Request Number

User Account Requests – Deprovision Multiple

1. From the IAO Requests screen, under USERS ACCOUNT REQUESTS, select

Deprovision Multiple.

FIGURE 71. IAO Requests > User Accounts Requests > Deprovision Multiple Accounts

2. A message will appear on the screen explaining you are about to start the process for deprovisioning multiple users from a base you have IAO permissions for. Click OK.

FIGURE 72. Warning Message Concerning Deprovisioning Multiple Users

a. You will be able to deprovision between three (3) and 100 accounts at one time.

b. This action is only good for accounts in base OU where you are an IAO.

This function can only be performed by using the customers’ EDI-PIs.

3. In the Deprovision Multiple Accounts screen, cut-and-paste the EDI-PIs from another document as shown below.

FIGURE 73. Enter Users’ EDI-PIs

4. From the drop-down menu, select the base you are deprovisioning the accounts from and then select Next.

FIGURE 74. Selecting Appropriate Base, if Applicable

5. A message will appear informing you the system is checking the accounts to determine if they are able to be deprovisioned from the losing base or not. After reviewing the message, click OK.

FIGURE 75. Message Explaining the IAO Express is Verifying the Accounts

6. If any of the accounts are ineligible for deprovisioning for any reason, the next pop-up window will let you know at the top of the message.

7. Listed in the middle of the message are those accounts eligible for deprovisioning.

8. If you entered an insufficient number of accounts for provisioning, the message will

9. Click OK.

FIGURE 76. Results of the IAO Express Verifying Users’ Accounts

10. A new window will appear with all of the accounts eligible for deprovisioning. You should verify the names again at this point. If necessary, you will be able to scroll through this list.

FIGURE 77. Continuing or Canceling the Mass Deprovision Request

12. You will return to the initial Deprovision Multiple Accounts screen. Click Submit Mass

Deprovision Request.

FIGURE 78. Submitting Request to Deprovision Numerous User Accounts

13. A message will pop-up informing you that you are about to submit a request to deprovision

FIGURE 79. Warning Message of Pending Account Action

14. A final message will pop-up informing you of the number of accounts you submitted along

FIGURE 80. Confirmation Message with Request Number

User Account Requests – Move Multiple

1. From the IAO Requests screen, under USER ACCOUNT REQUESTS, select Move

Multiple.

FIGURE 81. IAO Requests > User Accounts Requests > Move Multiple Accounts

2. A message will appear on the screen explaining you are about to start the process for moving multiple users from a base you have IAO permissions to. Click OK.

FIGURE 82. Directions for Moving Multiple Users

a. You will be able to move between three (3) and 100 accounts at one time.

b. All accounts must be for the same Organization and have the same Office Symbol (e.g., 690 NSS/DOEO).

c. Additional shared properties can be set (e.g., Login Scripts, Home Directories, etc.).

d. This action is only good for accounts already provisioned to bases other than your own.

Moving an account when personnel are on a TDY assignment to a base will result in them losing access to information and resources from the losing base.

NOTE

This function can only be performed by using the customers’ EDI-PIs.

3. In the Move Multiple Accounts screen, cut-and-paste the EDI-PIs from another document, as shown below.

FIGURE 83. Enter Users’ EDI-PIs

4. From the drop-down menu, select the base you are moving the accounts to and then select

Next.

FIGURE 84. Selecting Appropriate Base, if Applicable

5. A message will appear informing you the system is checking the accounts to determine if they are able to be provisioned to the gaining base or not. After reviewing the message, click OK.

FIGURE 85. Message Explaining the IAO Express is Verifying the Accounts

6. If any of the accounts are ineligible for moving for any reason, the next pop-up window…