Admin UW NetIDs


On This Page
  

An Admin UW NetID is used to provide a more limited context for an ID used for administering a set of workstations, servers, or a domain. An Admin UW NetID is required for some functions, including administration of "Delegated Organizational Units (OUs)" within the central NETID Windows domain service.

Creating an Admin UW NetID

  1. Be sure to read and be familiar with all the information on this Web page.
  2. Note that additional "two factor" security will be required to create (and perform functions with) an Admin UW NetID. To get started, you'll need to enroll in Duo 2-factor authentication (2FA).
  3. Create an Admin UW NetID using the manage page.

Purpose of Admin UW NetIDs

Faculty and staff can use Admin UW NetIDs to provide a separate, more limited, and more tightly secured context for performing system administrative functions. Common situations where Admin UW NetIDs are appropriate:

Types of Admin UW NetIDs

There are three types of Admin UW NetIDs. At most you are only eligible for one of each type.

Proper Use

All University of Washington policies regarding the appropriate use of University resources and responsible personal conduct apply to your use of UW Information Technology computing and networking resources including Admin UW NetID accounts. In addition, your use of UW Information Technology resources must comply with the restrictions and acceptable practices established specifically for these resources.

You must:
  • Only use these credentials in a secure computing environment. If you later determine that the credential may have been exposed to an insecure environment, you are required to immediately change your password.
  • Lock your session if you are away from the computer.
  • Change your password and contact help@uw.edu immediately if you believe your Admin UW NetID has been compromised.
You may not:
  • Authenticate via your Admin UW NetID from an unmanaged workstation.
  • Leave yourself authenticated for more than 12 hours unless needed for a long running process or procedure.
You should:
  • Only use Workstation Admin UW NetIDs to administer workstation resources. These resources should not include ldap directories, databases, applications, or services with an open network port, except where those services are a required part of the base workstation operating system.
  • Only use Server/Domain Admin UW NetIDs to administer server or domain resources. These resources can include ldap directories, databases, applications, services on one or more servers, domain (local or delegated) policies and properties.
  • Only use Enterprise Admin UW NetIDs to administer enterprise-class server resources, i.e., server resources accessible to more than 100,000 user accounts.
You should not:
  • Authenticate with either a Server/Domain Admin UW NetID or an Enterprise Admin UW NetID from a workstation that has been outside your administrative control. If you must do so, you must change the password associated with this Admin UW NetID as soon as possible from a fully trusted location.

Password Requirements

You must:
  • Change your password at least every 120 days, or more often if compliance requirements for a specific application require it.
  • Use a minimum password length of 14 characters.
You may not:
  • Share your Admin UW NetID password under any circumstances.
  • Use your Admin UW NetID password for any other account. This includes your personal UW NetID, other Admin UW NetIDs, local accounts, web sites, Hotmail, departmental domains, Gmail, etc.
  • Store a written or digital copy of your password in an insecure location.

Name changes

The UW NetID Manage page can be used to update the name associated with an Admin UW NetID.

Services for Admin UW NetID Accounts

Admin UW NetID accounts provide the following computing services:

Admin UW NetID Account Expiration

Admin UW NetID accounts can expire or be removed if the owner:

About 1 week after the employee is separated in Workday or their access via a UW NetID support organization is removed an expiration notice is sent.  UW NetID services including user object in AD and the kerberos principle (password) are deactivated 14 days and email forwarding is deactivated 90 days after the eligibility change notice.