MSCHAPv2 Migration: Planning
Migration Waves
| Wave | Device Type | Count | Contact | Status |
|---|---|---|---|---|
1 |
Chromebooks |
1,754 |
Paul Tran (ptran@chla.usc.edu) |
Pending - Schedule meeting |
2 |
WYSE Thin Clients |
857 |
Andrew Rolle (arolle@chla.usc.edu) |
Pending - Schedule meeting |
3 |
Windows Domain |
270 |
Intune Team |
Pending |
4 |
macOS |
331 |
JAMF Team |
Pending |
5 |
iOS/iPhone |
1,760 |
Intune/JAMF |
Pending |
Timeline (Proposed)
| Phase | Duration |
|---|---|
Planning & Wave 1 Pilot |
4 weeks |
Wave 1 Rollout |
4 weeks |
Wave 2 Pilot + Rollout |
5 weeks |
Waves 3-5 (parallel) |
6 weeks |
Total |
~4 months |
Stakeholders
Program Management
-
William Cox — Senior InfoSec Program Manager (PM, scheduling, escalation)
-
Sarah Clizer — CISO (executive sponsor)
-
Alex Mejia — Coordination and team engagement
Platform Ownership (Non-Windows)
| Platform | Owner(s) | Manager |
|---|---|---|
Wyse Thin Clients |
Andrew Rolle |
Albert Rodriguez |
Chrome Devices |
Paul Tran (Andrew Rolle / Jason Gol coverage) |
Albert Rodriguez |
Vocera |
Drew Kaurloto |
Albert Rodriguez |
JAMF (macOS/iOS) |
Drew Kaurloto |
Albert Rodriguez |
Intune (Mobility) |
Argam |
Albert Rodriguez |
Intune (PCs) |
Tony Martinez, Mark Silva |
Albert Rodriguez |
Workspace ONE (WS1) |
Argam |
Albert Rodriguez |
SCCM |
Tony Martinez, Mark Silva |
John Vuong |
GPO |
Jason Landeros (Justin Halbmann visibility) |
John Vuong |
Network Engineering
-
Tony Sun — Switch ACL changes (
ACL_WEBAUTH_REDIRECT) for guest ACL hardening -
Sajid Karim — NE management
ISE / NAC
-
Evan Rosado — ISE policy, authentication, dACLs, validation