Slashdot Mirror


How Many Admins Per User/Computer Have You Seen?

miffo.swe writes "I'm trying to find the normal ratio of technicians/support tech per user or computer in your average IT-shop. When searching around, I can't find that many examples or any statistics. We manage around 900 computers (mostly Windows XP) and 25+ servers (mostly Linux). There are around 2600 users of varying knowledge, mostly pretty low. I can't find any statistics on this, so real-world examples are very welcome since we do this with one sysadmin (me) and two sneaker techs. Are we seriously understaffed, or is this normal?"

314 of 414 comments (clear)

  1. Over 9000 by Anonymous Coward · · Score: 5, Funny

    Over 9000

    1. Re:Over 9000 by Anonymous Coward · · Score: 2, Funny

      I'm 12 and what is this?

    2. Re:Over 9000 by zero0ne · · Score: 1

      Over 9000

      What?! But that's impossible!

      OVER 9000!

    3. Re:Over 9000 by Verdatum · · Score: 5, Funny

      But with the blast shield down I can't even see! How am I supposed to fix IT issues?

    4. Re:Over 9000 by Nick+Number · · Score: 4, Funny

      Your users can deceive you. Don't trust them.

      Let go your professional self and act on instinct.

      --
      Promote proofreading. Don't mod up sloppy posts.
    5. Re:Over 9000 by Talderas · · Score: 1

      The odds of having an IT guy to fix your problems is approximately over 9000 to 1.

      --
      "Lack of speed can be overcome. In the worst case by patience." --Znork
    6. Re:Over 9000 by orsty3001 · · Score: 2, Funny

      Newfags...

    7. Re:Over 9000 by ElectricTurtle · · Score: 1

      I would think 12 year olds would really like Dragonball Z.

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    8. Re:Over 9000 by selven · · Score: 1

      How old your mom is.

    9. Re:Over 9000 by Useful+Wheat · · Score: 1

      I worked for an HMO doing IT support, and for 500 people we had 6 IT workers. The HMO generated a terrifying amount of paperwork, and one person would be on printer/fax duty every day. This doesn't sound hard, but we had 3 buildings spread out over 4 city blocks, each building with 4 floors, and each floor with a dozen printers (I'm counting fax machines in this number). This wasn't really by design, the company grew organically and this is the end result.

    10. Re:Over 9000 by Anonymous Coward · · Score: 1, Funny

      How many times I banged your mom last month

    11. Re:Over 9000 by acedotcom · · Score: 1

      Combo Breaker!

      --
      they say it is often more relevant then the comment above, all we know is its called the Sig!
    12. Re:Over 9000 by GasparGMSwordsman · · Score: 1

      ...Over 9000... *cringes*

    13. Re:Over 9000 by TheCarp · · Score: 3, Insightful

      I think it comes down to "what do you mean by admins"?

      The more you restrict what admins have to support, the more homogenous the environment, the better the ratio. The more you expect from them, the more complex the environment, the more you need.

      Another factor to add in is tools. Does every machine have actual remote console? (and I mean console as in, I can sit there and watch the POST console). Do you have build servers and good backups, and tested procedures to do restores if a system needs a total rebuild on the spot?

      My group is constantly compared in terms of group size to number of machines. Its maddening since we support 5 different flavors of unix (and VMS), some with ok tools configured and ready, some nearly "hand crafted". Then at least 3 different versions of each of those flavors. We can't seem to get projects approved to fix any of this (and god forbid we did it without a project!)

      We are compared against a Windows group, that supports a couple of flavors of Windows, and has had automation tools to schedule and do work remotely setup for years. Of course they can admin more systems with less headcount... they have the tools and environment setup to do it!

      Hell it took us almost 2 years to get project approval to set the machines for centralized auth through LDAP... and they wonder why we seem to need so many people for so few machines.

      So frankly, I don't think the question has enough information to be answered usefully. There are just too many variables to be able to put up a good estimation of appropriate head count per machine. I can tell you though that standardization, automation, and redundant designs will decrease that head count.

      As will properly trained/experienced admins (if we could only get them to send a couple of people to basic sun training we would be way better off... but we can't even get that. We have guys that have been effectively working on the level of entry level admins for years, who have never been able to get management to send them to a class).

      -Steve
      (who should post anonymously but, on some level hopes they will read this...)

      --
      "I opened my eyes, and everything went dark again"
    14. Re:Over 9000 by Verdatum · · Score: 1

      ...What makes you think I wasn't aware of this?

    15. Re:Over 9000 by socrplayr813 · · Score: 1

      Be careful though. This can lead to undesirable things being said to higher-ups. In some cases, it may also lead to loss of pants, hand cuffs, and insufficient amounts of lube.

      --
      The confidence of ignorance will always overcome the indecision of knowledge.
    16. Re:Over 9000 by Rehnberg · · Score: 1

      This is especially bad if the users' energy levels are over 9000!

    17. Re:Over 9000 by Rehnberg · · Score: 1

      Someone reads FAILblog...

    18. Re:Over 9000 by lgw · · Score: 1

      So what you're saying here is that administration of Windows machines is easier and better automated than Unix machines? Interesting.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    19. Re:Over 9000 by Random+BedHead+Ed · · Score: 3, Funny

      Hokey work ethics and obsolete tools are no match for a good Linux LiveCD at your side, kid. I've worked from one side of this industry to the other. I've seen a lot of strange stuff, but I've never seen anything to make me believe your all-powerful "instinct" can control your destiny.

    20. Re:Over 9000 by jacksonj04 · · Score: 1

      We were once like that, with every room having a printer. Now it's all centralised and it's a 5 minute trek to your nearest printer to collect anything.

      --
      How many people can read hex if only you and dead people can read hex?
    21. Re:Over 9000 by jacksonj04 · · Score: 1

      Yep. It's called Active Directory and Group Policy. Plus Windows Installer is amazing for managed applications.

      --
      How many people can read hex if only you and dead people can read hex?
    22. Re:Over 9000 by geohump · · Score: 1

      I suspect your allegation is true only when specific, narrow conditiosn are in place. Those conditions might include things like, comparing one version of windows platform against multiple versions of UNIX, Not being required to do anything not already supported by the capabilities in the group policy system, or the windows installer system, and not having to use any software that is not packaged with the MSI system, and others.

      In any complex environment, I suspect the allegation will fail. In those environments size would make the issue(s) worse. However, I do congratulate MS for addrressing many issues in the adminjstrative domain in recent years, now they are only 20 years behind in security.

    23. Re:Over 9000 by Anonymous Coward · · Score: 1, Funny

      A Jedi can feel the lube flowing through him.

    24. Re:Over 9000 by lgw · · Score: 2, Informative

      I suspect his statement is true in most large real-world environments: a proliferation of Unix server flavors, a rigidly standardized Windows desktop, and an SLA that only promises what the capabilities of the group policy system, and the Windows package management system, can deliver (there is no "Windows installer system": the Microsoft-official thing is the open-source WiX toolkit).

      --
      Socialism: a lie told by totalitarians and believed by fools.
    25. Re:Over 9000 by Antique+Geekmeister · · Score: 1

      Schneier's write up is mistaken. It's the difference between saying "people can break my windows, so I won't lock my door" and not spending huge amounts of money on an unbreakable or unpickable lock. A very modest level of encryption, enough to prevent casual snooping by unequipped news reporters or enemies in the field with few resources, would seem to represent a quantum leap in protection of the data being gathered.

      A very modest level of encryption, say equivalent to the old 40-bit SSL encryption, should suffice to block casual cracking and be feasible with the limited resources in drones. Since the control channel _is_ encrypted, it should also be possible to turn the encryption on or off depending on the designated receiver's capabilities to allow backwards compatibility.

    26. Re:Over 9000 by geohump · · Score: 1

      I have to disagree, but I thank you for partially supporting my position. There are very few "real world" environments which are both "large" and able to get by only on software which has been packaged in msi format.
      [[what you are calling the "Windows installer system" which is a fine label.]]
      From my real world experiences, Financial firms, HMO's, Insurance companies, Large Corporations, Call centers and the like, which all can be quite large, very distinctly do not have nice neat environments like the one you describe.

      They try to. They know it would greatly simplify their existence if they could. But reality intrudes.

      If IT were driving the business, there is a chance the environment could be simplified, but, alas, businesses that are driven by their IT depts rather than by their business, don't stay in business. :)

      A few other points:
      SLA - ? provided by who and to who? The IT Dept has an SLA with the rest of the company? And it prohibts the business the company is in from requiring anything not supported by the existing group policy software? That will last right up to the first "not supportable" item that has a negative revenue affect. At that point management will override the SLA, or throw it out completely.

      "IN any complex environment" was the first premise of my statement. Are you saying then, that most large scale
        environments today are not complex? Great. I guess we can start reducing the IT budgets and headcounts. Most people who think Windows administration is easier to do than *NIX administration just haven't ever seen how easily automated administering a large network of *NIX systems can be. Having the ability to login to any remote system has existed for roughly 30 years. And automating remote adminsitration has been there almost that long. As for locking things down, that too has been built in since the beginning of *NIX multi-user capabilities. These capabilities (and nice stuff like the new windows powershell [ Finally! ] ) are very nice additions to Windows that are mostly or partially inspired by analogues that existed in *NIX (and other) traditions, in some cases for decades before Windows acquired them. Again, I congratulate Microsoft on their ability to add in ideas from other places. I'm just surprised it took as long as it did.

      Microsoft clearly isn't dumb, but the company's actual policy of "Churn to earn", [[ try to get every customer to buy a new Windows license every three years ]] has always forced then to work on flash before actual useful needs. Tell me how many times did they re-invent (and rename) the COM system? 5? or was it six? and where is it now?

    27. Re:Over 9000 by haruharaharu · · Score: 1

      So what you're saying here is that administration of Windows machines is easier and better automated than Unix machines? Interesting.

      Admining a bunch of boxes with proper automation is generally easier than a bunch of boxes without. Pleae don't turn this into a unix vs windows flamefest.

      --
      Reboot macht Frei.
    28. Re:Over 9000 by lgw · · Score: 1

      Some friends of mine manage a > 100,000 desktop environment as a small team (technically, they manage the image creation and deployment, there are many other groups involved as you might imagine).

      In the bad old days, you couldn't use the Windows infrastructure for anything. You created your own "package" for a product by snapping the disk and registry before and after a product install, taking the diff, and feeding that into Wise or whatever else you used. These days it's different. You might not use the product MSIs directly, but even in their absense you still integrate with the Windows package management system: DLL refcounts, the presence of software in the "add/remove programs" database, etc, so that you can use tools like SMS to do software inventories and use other 3rd-paty tools that query the same database.

      The MSI file is the package, not the package management system.

      Yes, Windows has finally copied the good stuff from Unix for automated administation. I certainly never accused them of inventing any of it. But they've done it now, and come very close to parity. And Windows has the simple advantage of being effectively a single desktop platform that everyone writes against. Vista was rejected by large companies IMO primarily because it was the first MS desktop OS ever that didn't focus on backwards compatibility above all else - and as soon a significant number of apps won't run on the new OS, simplicity is broken.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    29. Re:Over 9000 by drsmithy · · Score: 1

      However, I do congratulate MS for addrressing many issues in the adminjstrative domain in recent years, now they are only 20 years behind in security.

      Which security features do you feel Windows is missing that every other OS had 20 years ago ?

    30. Re:Over 9000 by AK+Marc · · Score: 1

      Seems many companies grow "organically" - makes me wonder how any of them stay in business!

      25% profit squandered into 10% profit through horrible management is still 10% profit...

    31. Re:Over 9000 by JWSmythe · · Score: 1

          I think that's my ISP's staffing figures.

          "Calls will be answered in the order you are received. The current wait time is 3 days, 14 hours. Your call is important to us, please stay on the line." I've already been on hold for 2 days. It wouldn't be so bad, but their hold music is terrible. :)

      --
      Serious? Seriousness is well above my pay grade.
  2. Proper Planning by roblarky · · Score: 1

    If you properly plan your implementations, there shouldn't be a need for many admins..

    1. Re:Proper Planning by ColdWetDog · · Score: 4, Funny

      Admins? Admins?

      Why, in my day we didn't have Admins.

      We had to unbox the machines ourselves, plug EVERYTHING in. We even had to figure out interrupts by ourselves. And don't get me started about trying to snake the coax around the building.

      Kids these days. Spoiled rotten. Don't even have to get up to turn the record over.

      Grump.

      --
      Faster! Faster! Faster would be better!
    2. Re:Proper Planning by teslafreak · · Score: 2, Insightful

      If you have employees, there is a need. The best implementation is still not fool-proof.

    3. Re:Proper Planning by roblarky · · Score: 1

      many != any

      My point was that this question really can't be answered as it's entirely dependent on the implementation. A poorly planned setup will result in needing many more people to continually plug the holes.

      If a dept feels they're understaffed, they must first evaluate the workload and determine if the implementation is unnecessarily causing extra work . Then correct the root issues (possibly hiring contractors for the interim) and reevaluate. Rinse and repeat until there's nothing left to improve upon, then you'll know if you're truly understaffed; either hire on the good contractors if you actually need more staff, or let them all go when the contracts are up.

    4. Re:Proper Planning by fuzzyfuzzyfungus · · Score: 2, Interesting

      It also depends on what your implementation needs to do:

      If you have a bunch of call-center drones, with rigidly standardized desktops, pretty much the only admin time should be on the servers, the occasional hardware failure, and pressing "reimage" if something goes hairy on the client end. If you are logging a lot of client-side admin time, you have a problem.

      On the other side, if you have a load of free-spirited and independent academics, who have-their-own-computers-thank-you-very-much-and-no-thanks-for-meddling, then your admin time will be on the servers, and on whatever IDS you are using to segregate those users who have a relaxed attitude toward antivirus technique.

      If you fall somewhere in the middle, though, with lots of employees who are unprivileged peons working on institutional computers; but who (in order to do their jobs) frequently need user-specific software, customizations, and various access tweaks, you'll be doing a fair bit more client-side admin.

    5. Re:Proper Planning by mirkob · · Score: 3, Insightful

      If a dept feels they're understaffed, they must first evaluate the workload and determine if the implementation is unnecessarily causing extra work . Then correct the root issues (possibly hiring contractors for the interim) and reevaluate.

      unfortunately the core problem is the fucking stupid users, no way to smat them up, nor to sack them...

      the second problem is the presence of more than 100 different programs, about 2 to 15 are to install in every single station in seemly random assortment that vary wildly depending on the single user...
      no way to solve that either.

      the third is a continuous spawning of new programs or functionality to implement the week before, so that you hastily put something up, than have to spend 5 time that time to correct, expand, modify, document ecc...
      all between a problem and an emergency

      without those 3 problem there would be less than 1/5 of the problem... end personal needed.

      now there is 4.5 tecnician, and 2.5 administrative to manage about 50-60 servers (half linux half win) and about 500 users on windows pc

    6. Re:Proper Planning by Bigjeff5 · · Score: 1

      Indeed, but don't forget the geographic structure of your organization and contractual limitations placed on IT either. For example, an organization housed in a single building, and an IT group that has little useless oversight (things like complicated ticketing systems, quotas, etc), one support tech could easily care for upwards of 2-3,000 customers, depending on the scenarios described above.

      On the other hand, if your organization is spread across 20 small locations many miles apart and are forced to use a crappy ticketing system, you will probably need a support tech for every few hundred people, just because of the time needed to answer a single service call.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    7. Re:Proper Planning by mabhatter654 · · Score: 1

      I think the issue is the measure of what you're doing for the company to make them money with IT projects.

      Many, many small companies see IT as "janitors" for the computers, and don't really expect much other than keeping the "tubes" flowing. If the article poster is working for one of those companies then they're probably about staffed OK. The job being to make your own work more efficient so you can go home on time! The biggest problem with working for those companies is skill-lag, you're doing all your skill learning outside of work so you don't get to put new things for 2600 users on your resume.

      Smart companies see IT as adding value and are open to IT coming up with new tools and better ways for users to do their jobs. If you build IT along with your business, your accounting/shipping/production clerks that were handling 20 customers are now handling 100 with no loss of quality.

      There's the 3 steps, if you write something down in a log, it should go in a spreadsheet to be shared and backed up; if it's important to be in a spreadsheet with lots of people looking at it, it should be in a database with proper rules. Most importantly, are you writing down in ink what can electronically collected? People in Information Technology should be working on making better Information available to the company all the time. If you're not doing THAT work then YOU are losing value as an employee in your career.

    8. Re:Proper Planning by fuzzyfuzzyfungus · · Score: 1

      True enough. Also depends on the institutional attitude/level of funding for things like wiring contractors and routine equipment refreshes.

      If all your wiring is professionally installed and maintained by people who don't show up on your IT payroll, and every computer in the place is less than 3 years old and has an active service contract, your support techs are going to spend a lot less time testing network drops and diagnosing funny hardware than if you have shoddy wiring and a mess of 5/6 year old hardware that you can mostly repair using parts from the ones that have already died.

      This doesn't mean, of course, that having contractors and warranties keeping everything new and shiny is actually always the cheapest way of doing things; but your tech/user ratio is going to depend pretty strongly on how much tech work is done, or avoided, by people you are paying; but not counting as techs.

    9. Re:Proper Planning by erroneus · · Score: 1

      You are insane. Business needs change frequently and dynamically. How can ANY implementation be properly planned and executed without any further need for maintenance? I suppose the NASA computer systems back in the 60's were properly planned and should continue to serve today as well?

      Everything changes from the start to the finish. There is no "proper implementation" and if there were, it wouldn't be proper for long. The IBM PC was designed to be expandable and adaptable and we can see how long the PC lasted... then the XT and PS/2 and on and on. In the end, there is only one thing you can guarantee, and that is that your IT infrastructure will change and will need to change for a wide variety of reasons. Every time support on a given software or hardware ends, updates and/or migrations will have to be planned and implemented. There is never an end to it and never could be.

      I once worked for an architectural firm and I have to say, they were the best users I have ever had. They were intelligent and responsible. I have worked for a newspaper as well... not the worst users. Now I work for a company in the energy field and I have to say, they are whiny, unreasonable and difficult to support.

      And if you think for a moment that "proper implementation" and "Microsoft Windows" can ever go together in the same paragraph with any meaning, you can't be all that experienced.

    10. Re:Proper Planning by petes_PoV · · Score: 2, Interesting
      If you are able to remove completely the users internet access (that's totally: not just during work hours) so they can't screw up their machines with stuff they download, knowingly or not then the support burden, costs and insecurity drop massively.

      Of course, reducing the number of support calls is not necessarily in the interests of the IT support people, who will therefore get cut. Even if it does improve overall quality.

      --
      politicians are like babies' nappies: they should both be changed regularly and for the same reasons
    11. Re:Proper Planning by roblarky · · Score: 1

      While you can do nothing about problem #1, #2 and #3 both revolve around proper planning.

      I've worked in 2 international companies, one of them was a shining beacon of how to implement a global enterprise managed by a very small team (labor resources aside), every-single-detail was carefully planned out and the IT's rules were enforced thoroughly and actually taken seriously by the execs. There were no rushes (except critical security stuff), everything was fully planned out; all applications were compatibility tested against every single other application, etc. When a new system needed to be built, there were a few base images, then a fully automated system of deploying the apps that person needed, from the desk where the PC was installed, kicked off remotely and fully unattended. The core, corp, non-dev IT dept was about 10 people.

      However, the other company was a COMPLETE cluster foxtrot. Nothing was planned, everything was rushed, major downtimes, I mean there's no way to explain it. And the core (corp) IT dept had (not counting dev) had about 75-100 people, a MASSIVE waste.

      Now, I understand that there are plenty of situations where management doesn't have the foresight to realize the savings of proper IT processes and just see what's in front of them "right now"; there's really not much you can do but campaign until maybe they listen (assuming you actually have the time to do so..).

    12. Re:Proper Planning by roblarky · · Score: 1

      Does no one read into things anymore? Why the hell does everyone keep assuming I meant that you set things up and walk away? Seriously, read my other replies...and when you do so, keep in mind that I have *only* worked in Microsoft shops.

      This whole Windows can't be managed or is just nothing but fail sh*t is getting so old. It has easily been close to a decade since Windows was utter crap. And 90% of the problems that happen nowadays are due to POOR IMPLEMENTATION!

    13. Re:Proper Planning by selven · · Score: 1

      Administrators! Administrators! Administrators!

      And a technician, since a chair just obliterated one of our motherboards.

    14. Re:Proper Planning by dem0n1 · · Score: 2, Interesting

      Smart companies see IT as adding value

      Except most companies see IT as a cost center and the way to cut costs is to cut staff then tell the users they have to take more responsibility for their environment.

      --
      Why save your soul when you can sell it for a profit?
    15. Re:Proper Planning by erroneus · · Score: 1

      When you work with things other than Windows, you will begin to appreciate the difference.

      As for "90% of the problems being poor implementation" goes, where do you draw the line? Lots of critical software itself is a "poor implementation" where some versions of AutoCAD requires administrator privileges to run properly. Some shops require the use of Deep Freeze to compensate for Windows lack of resilience.

      As a Windows-only guy, you are the poster-child for being myopic with regards to what acceptable standards are. When you begin to see the operating standards observed by other OS implementations, you will begin to appreciate why we disapprove of Windows so much. The 386 processor has some really impressive features that were to enable a serious security model for the PC and each processor following that were improvements of the same sort. But Microsoft Windows has consistently failed to take full advantage of those features by placing device drivers at ring level 0 or even -1 if there is such a thing. And Microsoft's "Virtual Device Drivers" that 3rd parties routinely implement in order to get more performance or access to the OS functions are just gaping holes in system stability and security that are unthinkable in other environments. But this is a programming culture that has been instilled since before Windows ever existed. When the BIOS was the OS, people started writing directly to hardware to gain extra performance and before you knew it, professional/commercial software was requiring device drivers for any given video card, sound card or printer. The promise of the BIOS being the operating system and each addon card containing its own BIOS extension was dashed away from the very beginning by programmers who placed performance over stability and compatibility.

      Microsoft Windows promised to cure this but soon failed to deliver with the addition of kernel-invading code and secret/unofficial API implementations both by Microsoft and selected 3rd parties. The corruption of the OS started with the corruption of the development process. And there is no way out of the cycle because the perceived investment in the current way of doing things is too great. This is what Microsoft calls "critical mass." The U.S. will convert to the Metric System before it moves away from Microsoft Windows.

    16. Re:Proper Planning by Sir_Lewk · · Score: 1

      Does no one read into things anymore?

      On the contrary, I suspect people are reading too far into your comment. What we have here appears to be a group of administrators taking your comment as a challenge on their competency, and responding accordingly.

      --
      "linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)
    17. Re:Proper Planning by Vancorps · · Score: 1

      Well expressed, a nice mirror of how I see IT in the company I work for. The tools we have developed and deployed over the years have allowed the company to double in sales with the need to add personnel. We are a very proactive team and it took a while to form a team that could get that way. Now we have a good programmer, and I see myself as a decent sysadmin.

      IT should embrace and extend. Everywhere we've touched has seem major improvements in productivity and that's the way it should be. Too often IT is seen as just a money sink for company, a necessary evil. Instead, the executives at least for the company I work for see as as enabling higher profits by reducing the cost of growth and increasing the capacity of our web presence which gives us considerable income these days.

    18. Re:Proper Planning by Z00L00K · · Score: 1

      How many admins needed depends a lot on the company structure overall. There is no real golden rule that works every time.

      If everyone works only office software, writes and prints documents the most work you will have is supporting the printers with paper and removing paper jams.

      But if you have a complicated software structure with license servers, replication of data and databases you will need more staff.

      The most important factor that often is forgotten by management is that there has to be redundancy because if one admin calls in sick or can't be present and there is an emergency there has to be a backup.

      So if you have sysadmins that looks like they are idling - don't worry too much, it means that the rest of the company is running well. If you have sysadmins that are looking like scalded rats running like they have had an overdose of LSD and amphetamine at the same time you are looking at big time trouble.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    19. Re:Proper Planning by roblarky · · Score: 1

      I never claimed to be a Windows-only guy, nor am I the poster-child. I will tell you any day that Linux blows the sh*t out of Windows for everything but gaming and end-user UI fluidity (please let's not go down that road..). Am I a Linux pro? Heck no, I started with Windows and that's where my core competency has continued to build, like a chick-egg kind of thing. I've taken many big strides to understand the internals of Linux and embrace the concept completely.

      My complaint was based on this statement:

      "proper implementation" and "Microsoft Windows" can ever go together in the same paragraph

      THAT is a myopic statement.

    20. Re:Proper Planning by roblarky · · Score: 1

      Here, have a billy goat.

    21. Re:Proper Planning by LOLLinux · · Score: 1

      Or perhaps roblarky could be more vague. Perhaps you could divine what he means by, "many".

      By many he probably meant the standard definition as used by the English language. You apparently appear to be even more functionally illiterate than your first post let on.

      You seem to imply that some preternaturally clever IT dept could make the right decision at every stage, and never be forced to do the dumb things the non-technical managers (business owners) always insist upon and never have to deal with ancient, legacy crap.

      No, in fact that wasn't what I or anyone else was saying at all. He was clearly saying that depending on how your infrastructure is set up you may need only a few admins or you might need many.

    22. Re:Proper Planning by element-o.p. · · Score: 1

      It has easily been close to a decade since Windows was utter crap.

      Vista?

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    23. Re:Proper Planning by gander666 · · Score: 1

      Sheesh, I remember token ring. Slickest thing since sliced bread.

      --
      Suppose you were an idiot and suppose you were a member of Congress ... but I repeat myself. - Mark T
    24. Re:Proper Planning by Forge · · Score: 1

      There cannot be real standards because of several things.

      1. Overlapping functions. Hardware, OS, Database, Application, Network. Who admins what gets vague. Very vague in offices where everyone gets along. (like mine)

      2. Where do you draw the line between admin and user? At my current employer roughly 1/3 of the staff administers something or other with lots of overlap.

      3. Adding customers to the equation confuses the issue further. I.e. Just a few people have access to the voice-mail platform. Most of those cannot log on as root, but it stores voice-mail for a couple million customers.

      I could go on and on but at the end of the day, You may need a dozen admins to handle 8 servers and another dozen to handle 2000 desktops.

      A better way to figure out this is to ask: "What is the value to the company of owning items X, Y and Z". Then subtract all the none human costs of keeping those systems (Power, Space etc...). Finally, subtract the cost of the responsible admins. If you aren't left with a substantial positive figure, you did something really really wrong.

      --
      --= Isn't it surprising how badly I spell ?
    25. Re:Proper Planning by roblarky · · Score: 1

      Fair enough. However, while it was pushed out way too soon and had plenty of annoyances, in the enterprise setting it still wasn't utter crap after we tweaked it; in fact it had quite a few extras to offer, unfortunately it also added a bunch of issues that shouldn't have been there. But at it's core, it's not that Vista was crap, otherwise Windows 7 wouldn't be Vista SP3 :)

    26. Re:Proper Planning by Abstrackt · · Score: 3, Funny

      Sheesh, I remember token ring. Slickest thing since sliced bread.

      Till the token fell out anyway. Then you had to send some noob PFY out to search for it under the desks. Hours of entertainment with that one.

      --
      They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
    27. Re:Proper Planning by trapnest · · Score: 1

      I wouldn't be too upset about what the GP was saying. I suspect that most of the users here were touched inappropriately as children by MCSEs. Or at least you'd think that was the case based on the extremely childish way they act toward anything MS.

    28. Re:Proper Planning by siride · · Score: 1

      What the heck are you talking about? I don't know of any serious x86-based OS that uses anything other than the ring-0/ring-3 split, with most drivers in ring-0. Linux, especially, is fond of this. Windows Vista and especially Windows 7 have moved more driver stuff into userspace, such as graphics drivers.

      Of course, the real question is whether putting drivers in ring-1 is really that much of a benefit. The drivers still need access to the hardware, which means they still need special privileges to do that. They still need to be able to handle interrupts, also requiring special privileges. And accessing hardware and interrupts means that system stability can be compromised by the driver...even if it were running ring-3 doing the same stuff. Take a look at the X drivers, which have been almost entirely in userspace, and yet have still managed to cause lock-ups, crashes and instability. Putting drivers in ring-3 is not, ipso facto, a panacea for system stability.

    29. Re:Proper Planning by benjamindees · · Score: 5, Funny

      This is exactly the way to think about IT. End-users are not your "customers" or "clients", and your role is not to serve them. They are your competitors. Your job is to eliminate them, and to replace them with whirring, glowing rooms filled with triple-redundant servers flawlessly executing fully-normalized databases and millions of tiny shell scripts.

      Middle managers are your natural enemies. Their interests are to increase warm bodies and to monitor butt-in-seat time. Treat them with cautious scorn.

      Your major challenge is to quantify your work as it relates to deferred costs and increased productivity, and to demonstrate this benefit to executive management. This will require a quick typing finger, elite charting skills, and a deft touch on the laser pointer.

      By the way, how many middle managers did you have to kidnap and drug before you were recognized by executive management?

      --
      "I assumed blithely that there were no elves out there in the darkness"
    30. Re:Proper Planning by cayenne8 · · Score: 1
      "I've worked in 2 international companies, one of them was a shining beacon of how to implement a global enterprise managed by a very small team (labor resources aside), every-single-detail was carefully planned out and the IT's rules were enforced thoroughly and actually taken seriously by the execs. There were no rushes (except critical security stuff), everything was fully planned out; all applications were compatibility tested against every single other application, etc. When a new system needed to be built, there were a few base images, then a fully automated system of deploying the apps that person needed, from the desk where the PC was installed, kicked off remotely and fully unattended. The core, corp, non-dev IT dept was about 10 people."

      This works pretty good IF you are only working with stuff that is not cutting edge or development and under a schedule. This works for a mostly static IT environment.

      I've been in situations where they locked down everything tight, and took forever to get software approved....and it was nearly impossible to get ANYTHING done of real value. They insisted on McShield scanning everything on access...this played hell and locked up our dev boxes (I think it was hitting the java directories for Eclipse)...a quick download of an open source tool, or even Oracle's new data modelling (free) application would have let us reverse engineer some databases quickly, but no....that was not approved, so we had to wait and negotiate with the customers (often DoD with enough red tape to really make it inefficient) to get outdated data models sent to us, etc.

      I appreciate what you are saying here, but, sometimes a balance has to be struck between planning, common/manageable infrastructure and progress.

      I mean, if you take an old windows computer, disconnect it from everything, and bury it in 20ft of concrete...it will be one of the most secure systems you'll ever have. It just won't be terribly useful.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    31. Re:Proper Planning by roblarky · · Score: 1

      Right, the company that had everything very streamlined was a major chemical company, the need for rapid technology shifts (well, Info Tech anyway..) was not needed.

      There is no single solution, it's up to each shop as to what's best. However, my general theme has been proper planning, "proper" being very subjective. I guess being in IT for so long, I *constantly* encounter people/departments that simply don't plan as best as they can and just "manage" things, while constantly complaining. I've made progress at getting some to change and reap the rewards, and others just keep doing what they're used to.

    32. Re:Proper Planning by Archangel+Michael · · Score: 1

      Okay, this is the second post today that is making me feel old. Scratch that, VERY old. THANKS for ruining my New Year :-P

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    33. Re:Proper Planning by v1 · · Score: 1

      2. Where do you draw the line between admin and user? At my current employer roughly 1/3 of the staff administers something or other with lots of overlap.

      There's probably already some major problems to iron out if you only have two tiers of users, admins and non admins.

      Delegate authority and power in tiers. Don't hand out power to everyone in authority just because they're in authority. The guy handling the trouble tickets does not need the root pw on the db server. Nor does his manager. The people with the most understanding of each system should be the ones that have their paws in it. In the end it also requires fewer people when it's clear exactly who's responsible for what, and knowing that there aren't a half dozen randoms to factor in when working on something. ("is this a hardware problem, or did Bob monkey with it again?") It also removes the need for overlap to combat "I thought YOU were working on that?" fails.

      --
      I work for the Department of Redundancy Department.
    34. Re:Proper Planning by m6ack · · Score: 1

      unfortunately the core problem is the fucking stupid users, no way to smat [sic] them up, nor to sack them...

      the second problem is the presence of more than 100 different programs, about 2 to 15 are to install in every single station in seemly random assortment that vary wildly depending on the single user...

      I'm sorry, but this attitude of treating people as idiots is the reason that IT is failing it's users. Truth is, many people in your organization are every bit as savvy as you, but in a different way. Idiots have a way of screwing themselves out of the organization... so, let them, but don't punish those that are truly effective.

      If people in a company need applications on their PC's, whether to experiment with them, or to do meaningful work, the IT staff better be able to deal with it, or they are doing a disservice to their company, and are making the company less agile and able to cope with a volatile business environment. So, develop the attitude within your group that /ALL/ applications are supported, but some are "standard," and suggested. You need to support the business needs of your company -- so, just deal with it.

      BTW -- stay out of the leaf nodes. Anyone with physical access to their PC's, & with enough savvy, has root access anyway -- so, give your people the respect they deserve. IOW, give everyone (the equivalent of) sudo access to their own PC's & LET THEM screw themselves and (hopefully) let them learn. Let idiots prove their ineptitude and let them get weeded out of the organization.

    35. Re:Proper Planning by MarcQuadra · · Score: 1

      I make the system images and package the downloads and SMS packages where I work. I suppose you would classify it as one of those academic environments. A few days ago a user called and asked if there was a good way to image her machine. When I told her to boot to the utility disk we hand out to people like her (department computer folks), log in to the file server, and reimage from there, she explained to me that:

      1. She's not on our network. They split-off years ago.
      2. She can't log in over VPN either, because they roll their own Novell services, and she doesn't even know her AD credentials.
      3. She certainly couldn't pull a multi-GB file over VPN.
      4. Our images sort of expect there to be LAN and AD access for stuff like logging in, pulling software, syncing the time, etc. They won't work in a bubble.

      I wasn't sure exactly how to answer her, but I felt like saying, "So you're basically from another company, I'm not sure I can spend time helping people who have already decided to do 'everything' themselves."

      --
      "Sometimes, I think Trent just needs a cup of hot chocolate and a blankie." -Tori Amos on Nine Inch Nails
  3. Depends by slimjim8094 · · Score: 4, Insightful

    The real question is are you always constantly working your ass off, fixing stupid problems - and therefore unable to do anything more productive? If so, then it seems you don't have enough people.

    If you have a fully managed office, and you can remote in to all these desktops and fix everything really quickly - then you're probably OK.

    Like most of IT, whatever works.

    --
    I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
    1. Re:Depends by RobertM1968 · · Score: 3, Interesting

      The real question is are you always constantly working your ass off, fixing stupid problems - and therefore unable to do anything more productive? If so, then it seems you don't have enough people.

      If you have a fully managed office, and you can remote in to all these desktops and fix everything really quickly - then you're probably OK.

      Like most of IT, whatever works.

      That last sentence hits the head right on the nail...

      The numbers really are determined by a lot of factors... if your business revolves around programming and engineering, and thus your workers are from those fields (as opposed to tons of avg computer users in a non computer/technical field), you are less likely to have serious issues that IT needs to address, thus requiring a smaller IT staff. And of course, what money IT is allowed to spend on initial setup and/or maintenance also determines the staffing size for IT. One can design a system that remote boots from the NIC and reinstalls everything to a machine specific image - or kicks the boot to the HDD if there are no problems making serious non-hardware issues trivial - if the money was there during the initial setup or a big upgrade phase... or one can fix the stuff the old fashioned way and go hands on (which requires more of an IT staff). Hardware differences also can determine staffing size. One of our customers had a problem with certain AMD XP machines when SP3 came out - required lotsa "hands on" fixing... other of our clients did not have those machines and needed no one and no help. Also, are the machines needed 24/7? Is there mission critical data on them (or no mission critical data anywhere - or mission critical data is on the server)?

      And so on... inotherwords, there are a ton of factors that determine staffing needs for IT. It could be one person per 10 or one person per 100, etc.

      Thus, slimjim8094's statement really does sum it up nicely...

      Like most of IT, whatever works.

    2. Re:Depends by Junior+J.+Junior+III · · Score: 4, Interesting

      The real question is are you always constantly working your ass off, fixing stupid problems - and therefore unable to do anything more productive? If so, then it seems you don't have enough^H^H^H^H^H^H the right people.

      A good SA can come in and make a lot of these stupid little problems go away, never to return.

      These sorts of problems can also be caused by bad management exerting too much control over the admins, or admins with weak people skills trying to please everyone rather than prioritize and do the right thing.

      When asked to do something, to you just go ahead and do it? Or do you require things like justifications, business cases, funding, staff, etc? If management can just ask anything of the IT staff, they will do so, and it will feel like you're being walked all over, and that you're overworked. If you have some basic sanity checks and make those requirements before a project can be greenlighted, you'll find that your job can be a lot easier. Doing this also makes planning happen before you get midway through a project and find that different stakeholders have different opinions on what should be done next.

      --
      You see? You see? Your stupid minds! Stupid! Stupid!
    3. Re:Depends by Splab · · Score: 1

      I've worked as the "IT-guy" a couple of times where I was doing various support, from showing how to open a word document to installing machines to lightweight management of servers, usually around 100-200 users would take 2 people to handle, but this has been "low priority users" (school and government) where waiting a couple of hours for someone to come by to fix your issues isn't a problem.

      As you pointed out, whatever works.

    4. Re:Depends by EatHam · · Score: 1

      When asked to do something, to you just go ahead and do it? Or do you require things like justifications, business cases, funding, staff, etc?

      Admins do not get to require justification or business cases to do their jobs. That is management's job.

    5. Re:Depends by Bigjeff5 · · Score: 1

      On the other hand, if that's the level of service the business is willing to pay for, that's what they should get. IT doesn't run the world, they make it easier for others to run the world. If management wants an efficient IT department (and they probably should) then they will do what you suggest. If they want tech guys at their beck and call to just fix things whenever they screw up, or get them whatever newfangled toy they might like, then they won't. Smart management will want an IT that gives them the most productivity at the least price, and that doesn't always mean IT gets to be the gatekeeper.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    6. Re:Depends by bwalling · · Score: 1

      No, the real question is how well you've managed the systems. You require a lot of admins per machine when you suck at managing systems. Set up your environment correctly and eliminate all the BS that's causing you unnecessary work. Sure, it's a generalization, but *good* admins will make sure problems don't keep happening.

    7. Re:Depends by sammy+baby · · Score: 2, Insightful

      IT Administrators are there to do what they are told. Admins who think they can 'demand justifications' are just jumped up losers who are envious of people doing real work that they are simply not smart enough to do.

      Sorry, but this is utter bullshit. I speak as an engineer in a development department who frequently needs to work with IT administration.

      Keeping the shop running is a cost of doing business. But that doesn't mean it isn't appropriate to try to do some kind of cost containment or planning on it. Believe me, I've seen enough bonehead mistakes to know that if our development group ran our IT infrastructure, it would be a total shambles. (Not to say that I love it as it is, but at least it's mostly functional.)

      I have no idea how it is where you work - maybe your IT department is jacked up crazy, or maybe you're just a peon sulking because you didn't get your shiny new test environment. But once your workstations and users start to number in the thousands, you can bet your ass that you'd better have a good plan to deal with them. That means budget, manpower, and authority, for someone in the group.

      As for the original post: if nobody who is actually in the IT group has the ability to set a budget, let alone the ability to hire and fire within reason, you are utterly boned. If I would prepare to flee.

    8. Re:Depends by lokiz · · Score: 1

      There is a big difference between being an admin for a development department and for an organization of users who can barely turn there computer on and off each day. In your case you develop software so you know something about what you are doing (at least I hope but I have seen developers who can program well but can't manage an OS to save their life). You still should give some credit to your admins. If they are decent they know how the system works and may give you a good reason why the change you want made is not a good idea. Justification should go both ways. But in cases where you only support users there are a lot of idiotic users who tell us to do even dumber things. For example we have been told to turn off all security measures because it is slowing everyone down but be sure to lock everything down because we don't want just anyone looking at confidential information such as upper management salary information. This is from the same member of upper management. A good admin doesn't just do what they are told. They should be smart enough to know when it is a good idea and when to ask more questions or just flat out say no because it is stupid beyond belief.

    9. Re:Depends by RichardJenkins · · Score: 1

      Everyone loves to generalise!

    10. Re:Depends by groslyunderpaid · · Score: 1

      That last sentence hits the nail right on the head

      There, fixed that for ya...

    11. Re:Depends by element-o.p. · · Score: 1
      OK, I'll bite.

      IT Administrators are there to do what they are told.

      Isn't that the role of *any* employee in a business? Unless you are the CEO -- and if your company is publicly traded, not even then because you still have to answer to the share holders -- you report to someone, and whoever signs your paycheck has the right to tell you what to do. This does not, however, mean that you, as the prima dona developer, have the right to tell me, as the SA, what to do. You can report problems to me, and request my assistance in fixing them. If I have no higher priorities -- and from your post, I can guarantee you will get an automatic downgrade in priority for any problem you request my assistance in fixing -- I'll see what I can do for you. However, I don't work for you, and I WON'T ask "how high" every time you say, "jump". And I am fortunate enough to work for a manager who will back me when I say, "That's just stupid. No, we aren't doing that."

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    12. Re:Depends by Brunan-G · · Score: 1

      Amen to this.

      My 'shop' has 15 locations, 8 physical servers, 14 virtualized servers and around 200 system users.

      We handle Solaris,Windows,Sco,ESXi,Oracle,Ingres,legacy ERP crap(TM), phones,cellphones,smartphones,network issues,custom coding and end user support with 2 people...

      Fortunately we have enough failovers in place that 90% of the serious operational issues go unnoticed by the end-user which is a blessing and a curse as sometimes people wonder what the h*** we do...

      Did I mention I hate this job? Oh yes, I just did...

    13. Re:Depends by Tekfactory · · Score: 1

      So Admin rights for everyone then?

      Forget change management too, that's obviously too hard.

      Managers probably never put things in email either, unless its to cover their behind.

      Verbal direction ought to be good enough.

    14. Re:Depends by rjbeeth · · Score: 1

      I've found that it really depends on the platform. And while I'm NOT trying to start an OS war or start any no it's not, yes it is streams, I've found and noticed that *nix takes a lot fewer resources than Windows of any flavour. Before I retired I was a *nix admin and a supervisor of a team of sysadmins, during our heyday we supported hundreds of servers and a thousand workstations with just 6 guys - 24/7. The problem was that we did too good a job and actually started losing resources because Sr. Management didn't see a problem AND since we couldn't show any "new deliverables" the resources got consistently cut. It lead me to coin the phrase "Success breads failure". I don't know if anyone else came up with that phrase, but based on my 35 years of experiences I found it to be consistently true.... Success does bread failure. As a manager of a SysAdmin team my main job was selling the team's reason to exist to upper management. With *nix everything is much easier to manage, the tools have been developed over decades now and they work like a charm. Updating a thousand workstations was a simple task, done by one person and done without impact on the user. When I left Senior Management had forced us to start moving over to Windows. The manpower required to support it (compared to my previous experiences) was horrendous. They were still on a learning curve and weren't sure how to remotely or automatically update anything - causing horrific delays for users - I myself had to wait 3 days of complete down time while I waited for someone to come and fix what should have been a simple problem, but one which I wasn't allowed to touch because I was from the *nix shop..... ah politics. I'm sure (hoping?) that they have gotten their act together since. The big thing here is selling your 'raison d'etre' to senior managers, no matter what platform you have. Once things have become stabilized and your work proceeds behind the scenes and everyone is happy, Sr. Management inevitably starts thinking of your efforts as an ongoing cost versus a benefit. So be aware....

    15. Re:Depends by Tekfactory · · Score: 1

      In 2003 I was an admin for a small market research company with a medium sized data processing group. I left them to go do some government contract work. When I first got there in 1998 it was a mixed up mess of machines, and over time I got a tape changer, patch management, reliable servers not whiteboxes, Terminal Services and VPN, gigabit backbones for the data processing group and things were moving pretty slickly.

      When I left they never bothered to hire my replacement as the manager who stayed behind could change tapes and handle dealing with the users. He got some rent a techs on retainer for heavy lifting and at the end of the following year he called me to see what he should do with a few hundred hours of support he had left. He ended up migrating the mail server to newer hardware I believe.

      So a few weeks ago I was talking with a friend of mine that still works there in data processing, the shop now runs itself, the manager is gone, and the rent a geeks are still on call for the heavy lifting.

    16. Re:Depends by Junior+J.+Junior+III · · Score: 1

      It depends on where the lines are drawn in the organization, whether IT staff have any kind of management role, or not. If IT staff have an IT manager, that's who should be greenlighting projects. If IT staff report directly to the departments they serve, they need to filter requests through some sort of sanity check process, and if this entails acting in a management capacity, then so be it. If this doesn't happen somewhere in the organization, you end up with IT embarking in pie-in-the-sky projects on anyone's whim, with no budget support, without well-defined goals, and without a plan. It's a disaster.

      --
      You see? You see? Your stupid minds! Stupid! Stupid!
    17. Re:Depends by Anonymous Coward · · Score: 1, Insightful

      Actually the support requirements in IT are higher the more you've got advanced users/developers etc. because they demand more applications, more servers etc. unless you've got an environment standardized to high hell, which won't really help with the productivity.

    18. Re:Depends by Anonymous Coward · · Score: 1, Insightful

      if your business revolves around programming and engineering, and thus your workers are from those fields (as opposed to tons of avg computer users in a non computer/technical field), you are less likely to have serious issues that IT needs to address,

      BS. Tech people are more picky about how their computers are setup and often cause more problems. I'm guess the 900 workstations are stuffed into a call center and the users have very limited access to any of the system resources.

    19. Re:Depends by jacksonj04 · · Score: 1

      If you don't have enough time in the day to read bits of /. during office hours, you don't have enough staff. There should always be a bit of idle time in an IT department's day so that when the shit does hit the fan you've got enough slack time to deal with it without sacrificing other things.

      --
      How many people can read hex if only you and dead people can read hex?
    20. Re:Depends by jacksonj04 · · Score: 1

      To an extent. If my manager suddenly told me to turn off the print servers (printing for over 10,000 users) I wouldn't blindly log in and shut them down. It's an action which affects the vast majority of the business operations, and therefore needs more than my manager coming to me and saying "kill the servers" before it'll actually happen.

      --
      How many people can read hex if only you and dead people can read hex?
    21. Re:Depends by node159 · · Score: 1

      if your business revolves around programming and engineering ... you are less likely to have serious issues that IT needs to address

      I'd have to disagree, if your running a heavy development shop your going to be doing a lot more work than maintaining a bunch of apps on limited user accounts fully managed by active directory on homogenized hardware.

      But yeah...

      Like most of IT, whatever works

      --
      GPLv2: I want my rights, I want my phone call! DRM: What use is a phone call, if you are unable to speak?
    22. Re:Depends by RobertM1968 · · Score: 1

      You do it your way... I'll do it my way.

      I also prefer to kill two stones with one bird. And, that takes a lot more skill than the other way around...

      ;-)

    23. Re:Depends by RobertM1968 · · Score: 1

      if your business revolves around programming and engineering, and thus your workers are from those fields (as opposed to tons of avg computer users in a non computer/technical field), you are less likely to have serious issues that IT needs to address,

      BS. Tech people are more picky about how their computers are setup and often cause more problems. I'm guess the 900 workstations are stuffed into a call center and the users have very limited access to any of the system resources.

      Well, if it is a tech oriented company, then most of those things are set up in images and maintained on central servers. That's how for instance, CompUSA did it. There was virtually no "on site" (ie: per store) support, and all updates, new software, patches etc, were simply pushed from the servers to the various workstations in the store.

      So no, it isn't BS... it's dependent on the setup and the expenses outlaid (and plans implemented) when everything was installed and configured.

      But, oh, wait! I already said that in my original post. ;-)

    24. Re:Depends by RobertM1968 · · Score: 1

      if your business revolves around programming and engineering ... you are less likely to have serious issues that IT needs to address

      I'd have to disagree, if your running a heavy development shop your going to be doing a lot more work than maintaining a bunch of apps on limited user accounts fully managed by active directory on homogenized hardware.

      True... but again, it all depends on the setup. The last big place I worked, all updates were pushed from the main servers. We could even do a complete re-image that way. Made maintaining the client machines very easy and required very little staff. "Oh, you hosed something? No problem, reboot and come back in a few hours."

      Hundreds of machines, all across the nation, 2 or 3 support people.

      But I did mention that in my original post, if in different words... ;-)

    25. Re:Depends by mustafap · · Score: 1

      Curiously, I got %30 "insightful" on that one.

      I was only kidding, it's been over 20 years since I thought like that. I don't know where I'd be without our IT guy ( thanks Glynn! )

      --
      Open Source Drum Kit, LPLC deve board - mjhdesigns.com
  4. You are understaffed by greatgreygreengreasy · · Score: 1

    It sounds like you are on top of things, but I'd say you are understaffed. We have 10-15 Windows servers, and a few hundred XP/Vista machines, and one admin-type, plus two full-time equivalent techs, and are looking for at least one more.

    --
    LRN 2 SWM
    1. Re:You are understaffed by RobertM1968 · · Score: 1

      It sounds like you are on top of things, but I'd say you are understaffed. We have 10-15 Windows servers, and a few hundred XP/Vista machines, and one admin-type, plus two full-time equivalent techs, and are looking for at least one more.

      Where do I send my resume?

    2. Re:You are understaffed by trapnest · · Score: 1

      Where can I send a resume? :P

    3. Re:You are understaffed by hesiod · · Score: 1

      Yeah, seriously. With that much staff for so little hardware, you'd have plenty of time for reading /.

      Unless the users are overly demanding or prone to destroying PCs, that should be a simple job.

  5. 100 to 1 is about right by alen · · Score: 3, Informative

    we're at around 1200 users and around 8 help desk people to support them all. 2 DBA's for 30 some MS SQL servers and 3-5 admins for 200 some windows/^nix servers. some people double by helping users in their office

    1. Re:100 to 1 is about right by Penguinisto · · Score: 2, Informative

      Mine's good for a laugh in some ways: 1200 users at our main site, 200 at our sales office. Manufacturing/sales environment, just barely out of start-up mode, with a ton of legacy crap laying around from an acquisition. Mostly Windows environment (boss drank the koolaid and asked for seconds), though Oracle and most of the critical infrastructure bits (esp. the Internet-facing ones) now run on RHEL, Fedora, or FreeBSD (courtesy of the DBA and myself). About 80% virtualized on the back-end.

      We have: 3 Admins (Sr. SA --me-- included), a CCIE, three help desk folks (slated for two more in 2010), three dedicated production floor tool/computer techs, a DBA, a SharePoint guy, 3 programmers, a BI guy, and (laugh if you must - I do) 4 managers and a CIO. The majority of these folks came on board in 2009 (myself included).

      We're pretty well covered at first glance... and if it wasn't for the constant flood of projects, coupled with an insufficient budget and the world's absolute dumbest executive management alive (simply read: "no downtime of any kind allowed, period"), we'd be sitting pretty.

      It boils down to the admins, techs, and the help desk covering most of the workload (esp. the one at the sales office, since she doubles as help desk down there - and yeah, I know, it's fucked up that way). The help desk handles the basic stuff (which is a godsend, since this time last year we only had one help desk guy). The CCIE handles the network and the phones (VoIP - best thing since sliced bread). The DBA handles about 15 MS SQL Servers and 10 Oracle DB's.

      A lot of keeping things sane has to do with building a basic infrastructure that works. For instance, when I showed up, the existing servers were badly overloaded and barely running, with zero redundancy. Now, either site can turn into a smoking crater, and the other would (with one exception thanks to bad programming design :/ ) continue running just fine.

      The next step is to make sure the system works - it isn't always perfect, but it gives you time to get stuff done (N.B. I'm on vacation this week - for the first time since I started working for these folks :) ).

      Finally (and this is a weak point in my case), you need a management with actual cojones. They're the ones who have to stand up to everyone else and demand justification, budget, and etc. for any project that comes down the pike. They also need to be able to either get downtime windows that you need, or insure that there is redundant resources to allow for said downtime.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
  6. At my location by teslafreak · · Score: 1

    At my company, about 1200 employees, a vast number of servers (mostly virtual). 4 service desk techs, 4 network operations personnel, 4 programmers. We still consistently feel a bit understaffed, but we manage. There are other locations of the same company with similar ratios.

  7. Support/user ratio by SoundGuyNoise · · Score: 3, Informative

    Here's what we've had at different jobs:

    Internal Corporate Helpdesk - 6800 users, supporting every application on desktops, 10 support techs during the day, 1 on nights and weekends.

    Website support: 10,000 users, supporting general usage of just 1 website. 4 techs, regular business hours only.

    --
    You never expect irony, do you?
    Want to be a professional wrestler? Visit www.iyfwrestling.com
    @iyfwrestling
    1. Re:Support/user ratio by benjamindees · · Score: 1

      Internal Corporate Helpdesk - 6800 users, supporting every application on desktops, 10 support techs during the day, 1 on nights and weekends.

      Unless you only support a small handful of apps, and have some extremely locked-down machines, you can't possibly believe that you're the sole support at a ratio of 1 tech to 680 users, can you?

      --
      "I assumed blithely that there were no elves out there in the darkness"
    2. Re:Support/user ratio by Bigjeff5 · · Score: 2, Informative

      Sounds about on par with my group. If you have the right infrastructure, like a centralized software location for installs, you can quite easilly manage hundreds of applications without requiring aditional overhead. Generally when a windows app breaks you can fix it with a re-install, and if that takes 30 seconds then it's no big deal.

      We have an outside help desk that only seems to be able to handle the most trival of problems, for everything halfway serious we do it. We have several hundred applications to deal with, and until recently it was no big deal at all (corporate overlords decided to manage all software installs globaly, so now it takes 20 minutes to install a piece of software, dumbasses). Anyway, we have about 5 guys supporting 4-5,000 users across three locations. I figure you could add another 2-3 guys worth of support and take away the nearly useless helpdesk, putting us right in line with the GP.

      And that's with our hands tied behind our back a bit with a crappy ticketing system and users with semi-free reign of their machines.

      That's only desktop support though, for server support we have a lot of servers (it has to be close to 100) and another half dozen to a dozen server admins, as well as a local carrier handling our phone support.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    3. Re:Support/user ratio by Xugumad · · Score: 2, Informative

      > Website support: 10,000 users, supporting general usage of just 1 website. 4 techs, regular business hours only.

      Envious. 7,000 users; 1 full time person and 2 half-time. Oh, and we're also expected to the develop the underlying application, not just make keep it up and running... ...actually, we're primarily meant to be developing it, and support isn't expected to be a major part of our job...

    4. Re:Support/user ratio by StrategicIrony · · Score: 3, Informative

      I've run about 700:1 ratio before. Of course, we were 2400 staff and 4 techs. It wasn't too bad because first thing in the morning, one of the techs would make sure we always had 3-5 good running PCs in spare for each type of image in the building and we solved a lot of problems with "swap the machine". A tech could create 5 images in less than 20 minutes of real "desk time" using my network deployment setup.

      When an organization staffs that way, nobody gets to bitch when the answer to most problems is "re-image" because we found out that doing more detailed troubleshooting for anyone under Director level, or one of the few critical technology people simply put us too far in the hole time-wise to get anything else done. It's faster to tell them to copy their data to the network, then go down and make sure they did it right and swap the machine. They can copy the data back after we set up their email. Max time on a support call that way was ~15 minutes and solved ANY problem.

      We actually managed to move an entire building of people from one place to the other in our spare time at that position as well as deploying wireless and doing about a dozen other things. It wasn't a sweatshop - it was actually one of the nicer places to work I've been to.

      We were running a wide variety of apps, which we solved by having 3 standard images that provided a substantial coverage of everything. Once the image was built, there was never any reason to install "apps" because they were on the image. There were two or three that weren't included that had strict controls on who could use them, but they were 1-2 minutes to install.

      if you can standardize the hardware and application images, this 680:1 isn't insane at all.

    5. Re:Support/user ratio by StrategicIrony · · Score: 2, Interesting

      Oh yeah,

      People who were "trouble" users learned really quick that jacking with their system caused them to get a fresh image and removed all their fiddling.

      They often quit messing things up after the second or third swap. Total time lost.. about an hour, total.

    6. Re:Support/user ratio by aztracker1 · · Score: 1

      Seems to me, your users are probably relying on web based applications, so the "Server Admins" should probably be factored in, as a server admin per 10 servers is a pretty high ratio. When the majority of your infrastructure is web based applications, then a fubar'd desktop/laptop is more easily replaced. If your storage is centralized, with good backup policies, it gets easier still. I'd suggest that most locations probably have 1-2 servers per 100-500 users, with 1 SA, and 2 techs per block... If your number of servers is higher, the number of admins may be higher, and techs lower in that range. It really depends on the critical software required, as well as how centralized the software is, and how locked down the desktops are. Being able to scale at 1:500 ratio is pretty reasonable once you clear a few thousand users.

      But you shouldn't *not* count internal developers, and SAs in terms of the support ratio with IT staff. I'd say it's probably 1:80 to 1:200 or so for most environments counting SAs, techs, helpdesk and internal developers. The ratios of SAs, techs, helpdesk and developers will vary, as will wearing multiple hats in smaller organizations.

      --
      Michael J. Ryan - tracker1.info
  8. Still valid? by geirlk · · Score: 1

    I remember hearing something along the order of 200 users, 50 computers and 2-3 servers per head in the IT department would be optimal when I worked as a sysadmin 10 years back.

    I can tell you this much, administering 250 users, 120 computers and 7 servers is too much for one person atleast, that's from personal experience. =) Mostly Win NT 4.0 back then.

    1. Re:Still valid? by Ozeroc · · Score: 1

      Back in my NT3.51/NT4.0 days we covered 500 with 3 just for 1st look maintenance which included getting them damn IRQs right to get the SCSI cards to work without losing your sound card. oy!

      --
      ...
    2. Re:Still valid? by Bigjeff5 · · Score: 2, Informative

      I do the non-physical work on about 500 users and computers, and 15 or so servers not quite by myself (a couple union guys do any physical work). I spend most of my day browsing slashdot with little to do, other than maintaining those servers, or when something goes seriously wrong on a machine. That's because the vast majority of the user's machines are locked down pretty hard (many don't even get icons on their desktop), and they only run a couple programs, which means there is almost nothing for them to screw up. The engineers tend to get themselves into more trouble, since their machines aren't locked down, but there are only a handful of them so it's no big deal (and they are smart, so they often fix their own problems).

      It pretty much all depends on your environment. I could envision a case where 200 users, 50 computers, and 2-3 servers per head is ideal, but in most well-run environments that would be extreme over-kill. Bump it up to about 500 computers and 10-20 servers per head and I think you're in the average ballpark for a decent IT group, and you could raise that a bit more if everyone is in the same building. These days it's rare to have more than one user per computer.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    3. Re:Still valid? by ottothecow · · Score: 1
      Where are all of these people getting worker numbers far higher than computer numbers? (2600/900, 200/50, 250/120, etc)

      Maybe it was the case many years ago, but every place I have worked had at least 1:1 if not more when you take into account machines kept as live spares and users with several computers. Gets even worse when you factor in the IT people also supporting blackberry deployments and the like. I can see it in a factory of some sort...or I have a friend in IT for a coffee shop chain--its probably 1:1 in the office but when users call in from a shop, they are calling about the shared POS machines. In an office setting people use individual computers...even interns who work on opposing days get their "own" system.

      --
      Bottles.
    4. Re:Still valid? by geirlk · · Score: 1

      The simple answer to our user to 'puter ratio is: Tech support dept. with 24/7 manned phones :)

    5. Re:Still valid? by geirlk · · Score: 1

      As this was some 10-12 years ago at the tech support dept. for a huge ISP in .no, we lacked the tools and policies to lock down the terminals properly. Also, keeping the techies happy meant letting them trash about some on their own machines. Witin limits ofcourse.. ;)

      Playing to much quake while supposed to answer phones could mean having your shell changed from explorer.exe to quake.exe e.g. =)

  9. Too many chiefs and no indians by grapeape · · Score: 3, Informative

    Right now its 4 offices around 120 employees and just me...oh and I forgot (or selectively blocked) a former client who keeps calling me to pick up after their new "IT guy" who is supposed to save them money. If they were all in one location I could probably juggle it better but as it is I'm starting to burn out.

    1. Re:Too many chiefs and no indians by SatanClauz · · Score: 1
      i'm in almost the same boat, 4 different offices spread through 5 buildings. 6 servers (file/print/db/specialty apps) around 300 workstations and about 400 users

      yeah, burning out fo reals, need like 1 more guy to base in another building and i'd be better.

    2. Re:Too many chiefs and no indians by Penguinisto · · Score: 3, Interesting

      * Remote desktop and VPN are your best friends. Learn them, live them, love them.

      * No need to forget the former client. Instead, tell them that your consulting rates are $150/hr at a 10 hour minimum fee per incident, with a 150% premium on weekends and holidays. That usually shuts them up in very short order. If you actually prefer to get some scratch/business off of them, drop the 10-hour minimum to 2 or 3, and only budge on the rates if you know that the going rates locally are lower.

      * Your employer had better be paying for gas and travel time, plus wear+tear on your vehicle (if they haven't already supplied you with one of their own), and don't forget the tax write-off on the car if you're using yours.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    3. Re:Too many chiefs and no indians by Krishnoid · · Score: 1

      * Remote desktop and VPN are your best friends. Learn them, live them, love them.

      I'd like to point out Teamviewer for quick, minimal-setup user assistance. It's come in handy a couple times for me and work acceptably even halfway around the world. I believe they charge for corporate users.

      There are quite a few options nowadays to meet this sort of need. Fog Creek Copilot is Joel Spolsky's entry into this space.

    4. Re:Too many chiefs and no indians by grapeape · · Score: 1

      Sounds like you are a jackass you just jumped to conclusions...the offices are as much as 60 miles apart and unrelated, it isnt one company with multiple offices. Two run mostly windows, one is a mac shop and the other is mix of linux and windows...one is a govt contractor with no feasible outside access and no desire to add any, the others are under tight budgets and really don't care if they work me to the bone as long as they don't have to spend money on infrastructure. Sure I'd love to move them all to blade servers with remote kvm access, mega ups's with remote access, centralized patching, etc but most barely allow a hardware budget big enough to replace a few workstations a year. But hey I'll give you kudos for evidently being amazing, I get at least 5 calls a day just from people who cant remember their own passwords or dont know how to convert a document evidently your are either brilliant or dont call because they figure your a jackass too.

  10. My dept is 'prox 600 computers/3 techs by Nimey · · Score: 2, Informative

    This is party due to our lack of automation - Active Directory's not got much penetration outside our area, we haven't got automatic package rollouts/updates, no out-of-band management, and there's no planning WRT buying computers; each dept will buy a machine as funds & needs dictate, with input from us.

    The three of us are desktop support. That doesn't count the sysadmins & netadmins.

    --
    Hail Eris, full of mischief...

    E pluribus sanguinem
    1. Re:My dept is 'prox 600 computers/3 techs by Fireye · · Score: 2, Informative

      Lack of AD doesn't prevent automated OS updates. You can implement WSUS without AD, which will take care of many critical OS updates, it just requires that you alter some registry settings and ensure the users have the latest Windows Update client.

    2. Re:My dept is 'prox 600 computers/3 techs by Nimey · · Score: 1

      OS and Microsoft Office updates are handled by WSUS, and antivirus by the AV server, but we don't update anything else automatically.

      The result is that some users have rather old copies of Flash Player, Java, Adobe Reader, Firefox, etc.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
    3. Re:My dept is 'prox 600 computers/3 techs by miffo.swe · · Score: 1

      We run WSUS without any AD and it does work. Just throw a .reg file at the machines. The only drawback with WSUS is that if you upgrade all machines at once a broken patch will break them all, at once.

      --
      HTTP/1.1 400
    4. Re:My dept is 'prox 600 computers/3 techs by Bigjeff5 · · Score: 1

      That's why you've set up a WSUS implimentation instead of just using MS though, so you can test the updates before you release them.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    5. Re:My dept is 'prox 600 computers/3 techs by hesiod · · Score: 1

      you would make this registry to 600 computers without Group Policy/Login Scripts/whatever...how?

      A real IT hero would make a worm to do it.

    6. Re:My dept is 'prox 600 computers/3 techs by Tekfactory · · Score: 1

      If you're smart, even if you have to do it the hard way, you'll only do it ONCE.

      Everything after that should be automateable.

      In a pre-AD world of 1997 I was stuck in a USDA office in Texas for 2 and a half weeks putting Nics into machines, loading netscape, installing networked printers. I touched over 200 boxes in that time by hand.

      So if you have to touch 600 machines, prep your Ghost image, management client, whatever, but the time you spend touching these machines by hand once is far less time than you'd spend touching each machine every time a new patch comes out for the rest of your life.

      And if you can get an intern or temp to help you, life will be that much easier.

    7. Re:My dept is 'prox 600 computers/3 techs by element-o.p. · · Score: 1

      Buy a KBox. We bought one about a year and a half, maybe two years, ago and it has made our lives much simpler. The learning curve is a little steep, and be prepared for your users to whine a lot during the first six months while you learn what settings are good and what settings will cause more problems than they solve. However, once you've learned how to make it sing and dance, it will make managing Windows, Mac or RHEL systems really, really easy.

      Oh, btw...two sys/net admins, two desktop support, one billing system support person in our IT staff for ~180 desktops, maybe 20 servers and about 60 remote locations across a couple million square miles of some of the most remote country in the U.S. (you can't drive to most of our sites).

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  11. What are you really asking? by jimbobborg · · Score: 4, Interesting

    I've seen one sysadmin per 70 Unix servers and one sysadmin per 30 Windows servers. That's a general guideline for SERVER systems. Desktops are another matter. I've yet to see a serious roll out of Unix desktops, so I'm going by Windows systems, but one help desk tech per 50 systems is what I've personally seen as optimal. More Windows PCs per tech and the help desk gets overwhelmed. Less than that and they sit around and play games most of the day. This is assuming that you push updates over the network, not go around and manually update each PC.

    1. Re:What are you really asking? by t0rkm3 · · Score: 1

      In a 5000+ desktop roll-out of Linux, (the one I've had the privilege to work at) the ratio was around 100 desktops to one SA.

      IBM's (According to their PS rep) benchmark for firewalls is 18 to 1, we currently are 35 to 1. With other Network Security devices (FW's, VPN, IPS, NAC) we are 42 to one. Avg time in service(in this field, not in company) in the group 14.4yrs.

    2. Re:What are you really asking? by guruevi · · Score: 1

      Mac systems are most like Unix systems. With a good set of restrictions (no local admins) you can manage about 100-300 Mac systems with a single admin. Above 100 users you might want to invest in a redundant admin just in case one gets sick.

      I manage about 250 users with 100 computers and 5 servers including mail, web, dns, network home and a few TB of imaging data + backup by myself and I am not really all that busy. I just make sure I have either a network or site license for most software and deploy it to all machines as software licensing is where most of your time gets to be for individual licenses and activations.

      I try not to deal with Microsoft as much as possible although we have a couple of Windows machines and virtual machines because of it's license restrictions, management and upkeep. Especially when you try to get central management capabilities (like SMS, AD and Exchange) you have to start figuring out how many CAL's you need etc.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    3. Re:What are you really asking? by dopeghost · · Score: 1

      Would agree with the 1 Desktop Support to 100 Users figure for windows as well. Plus an optional employee in training to handle holidays, upcoming promotions to SA etc On experience would say that ratio should hold even in a company with only 100 or so non-tech related users. Never been in a company with 5000 desktops. At 1 to 50 you'd be expecting them to do a lot more than just help users, fix machines and write procedures.

      --
      This UID is 7651 digits too high to subjectively infer IQ from.
    4. Re:What are you really asking? by Bigjeff5 · · Score: 2, Informative

      1 tech to 100 users seems extraordinarily high, I've never worked in an environment with that many support techs. I've worked in a locked-down environment with about 3,000 users and 5 help desk personel as the sole non-server support, and I've worked in an environment with 5 desktop techs for about 4,000 users (not very restricted) with a remote help desk for trivial matters (anything that takes less than 5 minutes to fix, basically). I currently work on a separated network for the second company, I'm the remote support for about 500 users and I make sure the engineers don't break the 10-15 servers under my control. There are a couple union guys that handle any physical work, but it is definitely not the major portion of their work, and there is no other support outside of the union guys and me.

      Your environment has to be a complete mess if you need 1 desktop tech per 100 windows machines. I could see it for a Linux setup if it's your first go of it, I imagine your IT department would need a few years to streamline things to get that number down, but really, windows is easy. If you need that many you're probably doing it wrong.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    5. Re:What are you really asking? by Bigjeff5 · · Score: 1

      CAL's aren't that bad, generally you just need to pick the structure that will cost you the least amount of money - i.e. for a lot of users and not a lot of machines, you want per-machine licenses. If it's the other way around you want per-user licenses. Some stuff like Exchange gets a bit more complicated, but overall it isn't that bad. It does get expensive, though Exchange is usually worth it.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    6. Re:What are you really asking? by Aram+Fingal · · Score: 1

      Is that ratio figuring that the sysadmin is only taking care of the servers at the OS level and not the application level? I administrate an application which has different functions spread out over eight servers. The OS level systems administration is handled by a staff of sysadmins who take care of many other systems in addition to my eight. Two of us (myself and an assistant) take care of the application. If the sysadmin staff had to administrate things like the custom server application for my department, there's no way they could maintain that ratio of servers to admins.

      I have noticed, by the way, that the job of sysadmin varies with the size of the business. At a really small business, the sysadmin does desktop support as well as server support and will even teach users how to do things. At a larger business, the sysadmin will only take care of server level stuff but that includes applications and network management. At a really large business, all these jobs are much more finely divided and a sysadmin only manages the server OS.

    7. Re:What are you really asking? by t0rkm3 · · Score: 1

      It also depends on the type of company and what the desktops are doing. In the former company with the Linux desktops, the desktops also did other work, especially after hours. Here, we have 50,000 desktops and probably 75 desktop techs worldwide. That doesn't count the SMS team (~10) or various application specialty teams.

      As always, the most correct answer is "It depends."

    8. Re:What are you really asking? by element-o.p. · · Score: 1

      Your environment has to be a complete mess if you need 1 desktop tech per 100 windows machines. I could see it for a Linux setup if it's your first go of it, I imagine your IT department would need a few years to streamline things to get that number down, but really, windows is easy.

      My experience is the exact opposite. While Windows is easy for a non-techie user to use, it's always been a PITA to administer (at least IME).

      We've got about 60 Linux desktops and about 120 Windows desktops where I work. The Windows machines constantly need work -- drivers, A/V, user hand-holding, pushing out updates, updates broke something, etc. We've got two full-time desktop-only support guys to handle the Windows machines. OTOH, I handle the Linux desktops (and the server work and not quite half of the network admin work) and I get *maybe* two or three calls per month for the Linux desktops (which are almost always printer issues). All of the Linux desktops are about 500 miles -- and a satellite Internet connection -- away, so the ability to SSH in to the machines and fix things via CLI rather than a slow-to-update GUI is invaluable.

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    9. Re:What are you really asking? by element-o.p. · · Score: 1

      We just turned up a Windows terminal server, and after managing Linux servers for so long, I got completely fed up with all the hoops I had to jump through to get the CALs configured for the term server. Even then, I didn't get it right, and had to fix it after the 120 day temporary license stopped working. I'm sure it gets easier with experience, but for me, it was just another reason to avoid Microsoft as much as possible.

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    10. Re:What are you really asking? by AK+Marc · · Score: 1

      I've seen one sysadmin per 70 Unix servers and one sysadmin per 30 Windows servers. That's a general guideline for SERVER systems.

      Where I've been, the "sysadmin" was also in charge of the applications. Having one person in charge of 70 servers with Oracle, MySQL, DNS, file sharing, web hosting (even if just the intranet), and all the other apps and such people want seems to be a lot of servers. I would think that just keeping up with patch notes (let alone actually putting the patches on) for applications on 70 servers would be a full time job. Then there's the backups, hardware failures, user changes, new deployments, and such. 1 per 70 could work if there is one and only one application on 70 servers, but that seems like that's not an IT department, but an IT person in an IT company.

      Desktops are another matter. I've yet to see a serious roll out of Unix desktops, so I'm going by Windows systems, but one help desk tech per 50 systems is what I've personally seen as optimal.

      Wow, really? 1 per 70 servers and 1 per 50 desktops? I've worked at a company where the "help desk" was three people. It was a 5000+ person company with 1000+ computers. One person on Microsoft app support, and two on installs/add/move/changes.

      From what I've seen everywhere I've ever worked, servers take much more in terms of support than users. But I guess much of the duties that a sysadmin had everywhere I worked you could call user support, as it included things like recovering emails deleted by the user, or email routing issues because of RBLs or such that affected only one person. So maybe I'm not clear on what you consider a sysadmin vs help desk. But I'd put the numbers closer to 1 to 20 (or 1 to 10 if all 10 have different apps the sysadmin is responsible for) for servers, and 1 to 100 for help desk (worse for small companies, better for larger ones).

  12. Lockdown by wsloand · · Score: 1

    In my experience, it's a function of how well you're doing your job and how locked down you can make the users' systems. If you do your job well and can effectively totally lock down the system (users install nothing, use Citrix, etc, and are only allowed to use a limited number of apps), that can be perfectly reasonable.

    1. Re:Lockdown by Jhon · · Score: 1

      Agreed. This is ideal. Unfortunately, where I work, locked down doesn't mean what it should. The only thing it does is give users a community desktop (desktop redirection) based on department and limit some of their local access. They can still install crap -- and the proxy doesn't block as well as I would like (but I'm no longer management -- we were bought out and I was taken on to manage a small server farm and sql dbs).

      Our answer is to have a handy-dandy ghost image to push to the workstation if the user screws something up. Not fun doing this across across a DSL vpn (we have hundreds of remote sites -- many of which are over a 5 hour drive for the nearest tech or special delivery), but it's better than shipping a new PC. Images are under 2gb... not scary.

    2. Re:Lockdown by Anonymous Coward · · Score: 1, Insightful

      Citrix is such a waste in so many ways.
      (1) Waste of employee time waiting for the program to load remotely and piped their way.
      (2) Waste of network bandwidth, especially if there is a large number of people using Citrix all day long.
      (3) Citrix is just one more UNEEDED complication.
      (4) Just install the programs they need locally, please.

    3. Re:Lockdown by miffo.swe · · Score: 1

      Most of the work we have is helping users do stuff they dont know how to do. The knowledge level is pretty low despite recent educational projects.

      --
      HTTP/1.1 400
    4. Re:Lockdown by rainmaestro · · Score: 1

      Agreed. Many of my problems come from not having the machines locked down (I've been able to reverse a few long-standing convenience-over-security decisions, but not this one). I've found BitTorrent clients installed, cracked copies of extremely expensive software (many thousands of $$$ per 1-user license), etc. Every machine has a different mix of software, different set of app patches, different versions of apps. No consistency at all.

      Locked machines with preset deployment builds for each department would make my life so much easier.

    5. Re:Lockdown by crowtc · · Score: 1

      Citrix is overused in some deployments I've seen, but can be a real boon for specific applications. On my network, workstations and users are locked down tight as a drum, users can install apps, but only from a list of specific offerings, for everything else the must call *me* first. The majority of our applications on our network are installed locally, installed and updated via Group Policy and some fancy scripting. All machines are loaded from images via RIS/WDS. The network runs smoothly and is extremely stable, with workstations running for 3-5 years without so much as a hiccup.

      However, my company has a handful of problem apps though that cannot be used at remote locations:

      (1) An accounting package that requires so much bandwidth for it's file/database traffic that it could easily saturate a 10Mbps pipe by itself. (No we *can't* change, it's an industry-specific package that would cost my entire annual IT budget to replace, and that's *before* the soft losses like training and wasted employee time)
      (2) A collection of HR Management software that refuses to install or update properly without full admin access.
      (3) Full remote desktop access for remote users needing direct access to their files in a centralized network document store. There are "Offline Files" users syncing their files over high-bandwidth VPN connections, but that doesn't help when you need to work on a shared Access database or other file that cannot be synced for some reason.

      Standard Windows Terminal services can probably do much of what we need *now*, but when the system was deployed, Citrix was *required*. The accounting and HR systems specifically - they simply didn't function correctly over standard NT 4.0 Terminal Services. We keep using it because we own the software and it works smoothly, so why break something that's working? :)

      Performance-wise, the primary applications actually load significantly quicker than they would on even a Gigabit LAN-connected machine (The Citrix servers are are on our network backbone). Because the majority of the network traffic is confined to the core switches, they require minimal bandwidth outside of the core. We limit LAN users to 768kbps, but WAN users are limited to 256kbps, with no ill effects - in fact, they rarely use all that bandwidth.

      Citrix/Terminal Services, like any other tool, has it's applications - used incorrectly it's just another source of problems, but in the right situation, it can be a godsend.

      Back on topic, our current IT Staff:Users ratio is 75:1, and we spend most of our time handling user requests or teaching.

      --
      -=- I tried going insane, and it was fun for a while, but I got bored and decided to go sane. -=-
    6. Re:Lockdown by Bigjeff5 · · Score: 2, Informative

      Sounds like you're using wrong, then.

      We use Citrix as a barrier between sensitive networks. We have a corporate network, a buffer network, and a sensitive network. Citrix servers sit in the buffer network allowing users on the corporate network to access the sensitive network without having any direct link between the two. It works pretty well, since we can lock down the buffer network to only allow the citrix connections and a few outside connections for things like AV and MS updates.

      As far as using Citrix to do real work on a day to day basis without such high security requirments, I've always thought it was a terrible idea. My company wants to do more of it though, and I can't understand why. A new laptop is about $600 and should last 2-3 years. Support per laptop is probably another $100 a year, for grand total of $900. I can't see the extra bandwidth and citrix licensing used up by a user working off of a citrix connection costing less than that over three years. Plus the fact that the user still needs a laptop, and if you make him buy it himself he's just going to charge you more for his services. So the only potential savings really is in software licensing, but if the users are working day in and day out on the same apps, always using up a citrix connection, then you aren't really saving anything as you still need that many licenses. It makes no sense to me, and you've drasticly increased your server side support needs.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    7. Re:Lockdown by Bigjeff5 · · Score: 1

      Hey you know, if you really want them to change their ways, and make a few bucks in the process, you could report them to the BSA and get upwards of $1 million for your trouble.

      Though, really, you'd only want to do this if you were leaving the company, as it likely wouldn't be a fun place to work for you afterwards. Still, they'd certainly change their ways!

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    8. Re:Lockdown by rainmaestro · · Score: 1

      Problem there is that doing so pretty well blacklists you from ever working in the industry again if your name ever gets out. Not feasible unless you're getting enough to retire on. In this case, I don't want to screw the company just to get a policy changed. My boss went ballistic when I reported what I'd found, and legit licenses were immediately ordered. This was just a case of someone (no longer employed) acting without permission.

      Of course, if you really want to get vindictive when leaving, report your company's OSHA violations (practically every company has them, regardless of their claims of OSHA compliance). Nothing like a surprise visit from an OSHA inspector to really make the owners love you.

    9. Re:Lockdown by wsloand · · Score: 1

      My best experience in managing a moderate sized company was ~400 users where 80-90% of them had thin terminals and only needed about 10 apps. The terminal cost ~$300 each and the maintenance on the terminal was almost nil. If one wasn't working, a local "expert user" put it into a "broken" box and we would take it, reflash it, and if it still didn't work it was replaced. ~2%/yr broke (one every other month).

    10. Re:Lockdown by Blue23 · · Score: 1

      As far as using Citrix to do real work on a day to day basis without such high security requirments, I've always thought it was a terrible idea. My company wants to do more of it though, and I can't understand why. A new laptop is about $600 and should last 2-3 years. Support per laptop is probably another $100 a year, for grand total of $900. I can't see the extra bandwidth and citrix licensing used up by a user working off of a citrix connection costing less than that over three years.

      I have to disagree with your grand total - it doesn't look at all at the cost to administrate it. We run Citrix for about 3000 users. Administering that many laptops, even with tools like SMS, is much more consuming then giving the majority of users toasters to connect.

      Laptops aren't that more expensive then a good toaster & monitor, but the real savings is in administering them, diagnostics and troubleshooting, updates, and uptime. One terminal server from the farm goes down, users just reconnect and get sent to a different one. One laptop goes down (or needs to reboot, or get memory added, or ...) and that person isn't doing anything until we get someone to focus on just their problem.

      Of course, the majority of our users don't need laptops as well. We only give out laptops to those who need it (mobile sales, IT, etc.)

      --
      LITTLE GIRL: But which cookie will you eat FIRST? C. MONSTER: Me think you have misconception of cookie-eating process.
  13. I think you're understaffed. by Anonymous Coward · · Score: 4, Informative

    Government facility:
    3000+ PCs
    2600+ users(yeah I know we have more PCs than users)
    200+ servers

    6 Server Admins (understaffed)
    2 Network Admins
    2 Telecom Admins
    3 Infrastructure techs
    15 Helpdesk Technicians (overstaffed by about 5)

    47 other IT employees for software support/dev staff and management staff

    1. Re:I think you're understaffed. by petes_PoV · · Score: 1

      Government facility:

      I'm surprised. Any decent government run operation would need far more than 47 managers just to oversee the management processes.

      --
      politicians are like babies' nappies: they should both be changed regularly and for the same reasons
    2. Re:I think you're understaffed. by Locutus · · Score: 1

      is it just me or does it not matter what OS's are being supported? I remember in the mid to late 90s there were a few polls on this kind of thing regarding supporting OS/2 systems over Windows. Back then, UNIX, Netware, and OS/2 owned the server rooms. I remember there was a huge help desk system for some appliance company with a lonely repairman where it was said that they required many times more admins for the Windows computers when there were only 25% or so of their help desk systems running Windows compared to OS/2. I've heard the same kinds of things regarding UNIX shops with some Windows boxes. Maybe that's changed 10-15 years later but from knowing people in government IT, they are still dealing with wanked Windows Registries and tons of security issues along with way too many servers because they've not moved to virtual machines. When Windows became accepted in the server room, it was as if rabbits were let loose in there. A few UNIX boxes turned into hundreds of Windows Server boxes.

      Over the years, I've worked at a few places where the desktop computers numbered in the hundreds( over 500 ) and they were UNIX based. I never saw the admins working on a desktop but, as a developer, interfaced with them by email and phone for access to applications. In all cases, I could count the number of admins on one hand. From talking with computer users over the past 20 years, most have no understanding of the kind of uptimes we used to have and they still know darn well what Ctl-Alt-Del means and it's not login.

      LoB

      --
      "Anyone who stands out in the middle of a road looks like roadkill to me." --Linus
    3. Re:I think you're understaffed. by WebCrapper · · Score: 1

      Another lower Gov entity (I'm no longer there)

      ~80,000 users
      ~6,000 PCs
      ~250 servers

      6 SA's (understaffed)
      3 Net Admins/Telecom
      1 DB Admin for 40+ servers (understaffed)
      1 Web (2 servers) / AV Admin (full time with McAfee EPO)
      5 Help Desk Techs (severely understaffed)
      1 Network Planning and App management (WSUS, imaging, etc)
      2 Abuse Admins
      4 Web Programmers
      ~30 onsite "goto" people for smaller problems and application training ...and a whole lot of unhappy people.

      It wasn't a happy place.

  14. used to do about 100:1, but data is more important by tomherbst · · Score: 1

    It does not seem widely off - I used to manage a team of 10 people who did the admin/networking for 8000 users. We did not do all of the end user hand holding, though some days it seemed like we did. Our ratio was about 1:1 users to computers, so your needs may be higher with the larger percentage of users. Rules of thumb are useful, but in any support function is it really important to keep data on what you are doing. If the team works really hard it seems like you aren't even there. Most people don't understand the "magic" required to keep this stuff working. If you track calls/time, it is much easier to ask for more resources/staff when they are needed.

  15. Small Shop by g0bshiTe · · Score: 2, Informative

    We have a small shop, we support around 150 users, all on XP boxes, 2 Windows Servers, and 2 Linux Servers, we have 3 of us in our shop including the IT Manager.

    --
    I am Bennett Haselton! I am Bennett Haselton!
    1. Re:Small Shop by barzok · · Score: 1

      It may be the minimum required to operate a department, depending upon the business's needs.

      • The manager should be managing, not down in the trenches (I've seen managers who are plenty capable of doing the technical side - but if they're trying to balance both, one side or the other is going to get less attention and they will fall behind).
      • You can't have only a single tech, because eventually he needs to take a vacation or is going to get sick.
      • If you require support beyond a standard workday, you can't have one tech working 12 hour shifts or 6-7 day weeks constantly.
    2. Re:Small Shop by drinking12many · · Score: 1

      Depends on your shop and requirements. I had 200+ PCs and Macs. 6 Physical servers several more virtual, 2 AD domains, used altiris for most of the PC management and imaging and we did it with 2 part time people. In our case it was an education environment and 160 of the machines were lab machines so they were essentially identical.

  16. It Varies by jeffy210 · · Score: 2, Informative

    It usually varies every place I've been between the quality/age of the hardware and the competency of the users. Additionally it depends on how automated the system is, and whether there's a dedicated support staff. Small places I've been I've find you can do about 45-75 comfortably... It was a bit stretched when it reached 100:1

    Just my $0.02

    --
    ------
    "And may your days be long upon the earth."
  17. 150: 1 is Decent.. by ironwill96 · · Score: 4, Interesting

    You have more than double that so i'd say you are pretty understaffed. I saw a video once that was actually pretty intelligent in talking about standard support ratios. Basically, there isn't a "standard" the answer is almost always "it depends". You start with your userbase - how tech savvy are they? How many applications are you supporting? What kind of hardware do you have? How many remote supporting tools do you have to use? Each of these answers adjusts the support ratio up and down and sometimes something as low as 75:1 is needed and other times 300:1 is just fine.

    Still, in the place I work now we have 600 machines and 40 servers or so (most virtualized) and we have 13 IT people (with 1 open position right now). This includes 1 helpdesk person, 2 programmers, 2 systems support personnel (they support specific software we use), 2 hardware techs, 2 network analysts, 3 systems engineers, a secretary, and the boss.

    --
    "To strive, to seek, to find, and not to yield." - Tennyson
    1. Re:150: 1 is Decent.. by cppmonkey · · Score: 1

      The parent post is right on with what I've seen. 250:1 (users to admins) in the environment where it was Windows+Office+Thunderbird on the desktop and 50:1 where it was Mac+Adobe+Office+Video production+1/2 doz other highly specialized pieces of software.

      What is perhaps just as important as the ratio is having a great secretary. The ability to keep moving and not have to stop and worry about signing for the Fed Ex man or the boss making "executive decisions" while you are at a users' desk is invaluable.

  18. What's a "Sneaker Tech"? by ZarfMouse · · Score: 2, Funny

    Google doesn't have any relevant hits for this phrase (except this article).

    1. Re:What's a "Sneaker Tech"? by Tsar · · Score: 2, Funny

      Google doesn't have any relevant hits for this phrase (except this article).

      Obviously you don't know how to search. I found a job posting for a sneaker tech right away.

    2. Re:What's a "Sneaker Tech"? by Culture20 · · Score: 1

      Google doesn't have any relevant hits for this phrase (except this article).

      Someone who uses the sneakernet to work on a box instead of better tools like SSH/pstools/RDP/ARD/GPO

    3. Re:What's a "Sneaker Tech"? by ElectricTurtle · · Score: 1

      Who else would be able to fix the sneakernets?

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    4. Re:What's a "Sneaker Tech"? by ZarfMouse · · Score: 1

      Heh, yah, I picked up on the analogy to that great bit of jargon.

      What boggles my mind is that the phrase is used so casually here as if everyone has heard it but it seems from what I can tell to have NEVER been used on an indexed web page with this particular meaning. So what I'm curious about is: is this a term that is used commonly among sysadmins these days? Or did the original poster just now coin it and through the power of /. it'll become a new standard term? Or is there some variation of this term that is more common, for which citations could more easily be found?

      Are we witnessing the birth of new vocabulary?

    5. Re:What's a "Sneaker Tech"? by ElectricTurtle · · Score: 1

      Quite possibly, though I don't really think it's that important. Terminology and phraseology pass into and out of use all the time in living languages. What if you observed the first use of 'twenty-three skidoo' or something similarly unimportant? More than likely even if a term or phrase catches on for a while, it'll pass out of fashion with successive generations.

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    6. Re:What's a "Sneaker Tech"? by ZarfMouse · · Score: 1

      Heh, I'm pretty interested in linguistics/language change, so if I witnessed the birth of a phrase that would later fall out of style I'd be pretty psyched. I'd probably tell my grandchildren about it.

  19. We need more details by Anonymous Coward · · Score: 1, Insightful

    Unfortunately you are forgetting some major details. Most importantly what applications are the users mainly using? For example their business system, is it proprietary? Do they seek help internally for financial problems within their financial system? I've worked at places where IT was nothing more then the geek squad to where I am now which IT seems to be a core pillar of everything. I have learned more accounting over the last 4 years then I'd ever wanted to know.

    Additionally, what industry are you in? Or should I say what do the users mainly do?

    Also, what kind of controls do you have on internet usage (matters for malware)? Mainly what kind of issues do you have to fix? Are the users spread across the country or all in a central location?

    Basically the complexity of your architecture makes a huge difference.

  20. standard is supposed to be 185 to warrant on-site by Col.+Panic · · Score: 1

    tech. i have 300. when i need help we establish a project and bring in contractors

  21. what usecase? by Jessta · · Score: 1

    If you're running a distributed system where each node is exactly the same and you just push out a standard image then you could have a 1:1000 ratio.
    But if you have a a bunch of computers doing very specific things each one being different the ratio has to be less.

    An average doesn't really make sense unless you can specify the usecase for these systems.

    --
    ...and that is all I have to say about that.
    http://jessta.id.au
    1. Re:what usecase? by Bigjeff5 · · Score: 1

      The infrastructure and automation is key, if you've got 2-3 computer images, and 3-4 hardware models for 4,000 computers/users, then a half dozen support personnel is probably fine, especially if your software management is centralized (as it should be in this case). Not counting any odd server setups you may have, I could see an IT department getting away with 10 or fewer support personnel total, particularly if you've set yourself up to handle all but most severe problems remotely.

      Now, if every user gets to pick what brand and model of computer he or she wants, and every setup is custom, then yeah you're looking at much much higher ratios. Most large companies have figured this out though, and don't allow that sort of thing. A standardized model will fit 99% of the time, and it dramatically reduces support and life-cycle costs.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
  22. You're posting on Slashdot by Havokmon · · Score: 1

    "Are we seriously understaffed, or is this normal?" It seems to me if you are able to read/post on Slashdot AND maintain those systems, you're doing something the rest of the world needs to look at.

    --
    "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
    1. Re:You're posting on Slashdot by miffo.swe · · Score: 1

      Im just managing the servers and i have automated the crap out of those. I have put countless hours into working every single kink out of the systems and make them behave. My job is the easy one, the grunt work lies at the user side of things.

      --
      HTTP/1.1 400
  23. Re:WAY UNDERSTAFFED! by Fireye · · Score: 1

    You, good sir, live in the land of plenty. Can I come?

    I think my corp is at about 1 syadmin per 800 people, one netadmin per 1500 people, and about 1 tech support per 700 people. I think the users would be happier with 1 tech support per 250-300users.

  24. 1:5000 by nurb432 · · Score: 2, Interesting

    Was the ratio i had when i was managing an entire assembly plant's IT operations. Yes i was working my ass off.. 24/7 operation as well.

    Where i am now, its more like 500:30000 ( ok, not a true ratio, but i wanted to include the total number too, since its pretty high. )

    A lot depends on what industry you are supporting, your user base, and your budget.

    --
    ---- Booth was a patriot ----
    1. Re:1:5000 by benjamindees · · Score: 1

      It doesn't count if they were assembling computers, you know.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    2. Re:1:5000 by nurb432 · · Score: 1

      I agree, and we weren't in that industry.

      --
      ---- Booth was a patriot ----
  25. well... by dmnic · · Score: 1

    at my office I support 200 users/pcs, 10 servers, 4 copier/print systems, document scanning/indexing systems and warehouse production systems - and I'm not allowed to use GPO. my company has other locations with less users/systems to support but with more support staff...

    1. Re:well... by nevesis · · Score: 1

      You're not allowed to use GPOs? Why not?

    2. Re:well... by dmnic · · Score: 1

      I wish I knew... I've been asking for a few years now.
      generally it's not a big deal but a Exchange/PDC upgrade earlier this year frazzled my nerves with having to touch ever machine individually to update shares/printers.

    3. Re:well... by Culture20 · · Score: 1

      I wish I knew... I've been asking for a few years now. generally it's not a big deal but a Exchange/PDC upgrade earlier this year frazzled my nerves with having to touch ever machine individually to update shares/printers.

      Search microsoft's site for sysinternals and/or pstools. Use psexec.exe to run batch files running reg.exe on all of the machines. It will save you a lot of time, especially if you do it like:
      for /f %X in ( ' type computerlist.txt ' ) do cmd /c start cmd /k psexec.exe \\%X -c ThingToRunOnRemoteMachines.bat

    4. Re:well... by bigstrat2003 · · Score: 1

      Or just "psexec.exe @computerlist.txt [other arguments] ThingToRunOnRemoteMachines.bat", which accomplishes the same thing.

      --
      "16MB (fuck off, MiB fascists)" - The Mighty Buzzard
    5. Re:well... by nevesis · · Score: 1

      You can also use psexec to run VBS scripts, or VBS scripts with user escalation (your users are running as users and not local admins, right? :P) compiled into an exe via Visual Studio Express.

      Alternatively OP could ask for an agent based system such as Kaseya, Altiris, etc.

      I really don't understand why a company would ban GPOs, however. That just reeks of incompetent management.

    6. Re:well... by Tekfactory · · Score: 1

      It IS too easy to break things with GPOs.

      However if your OUs aren't crap, and you use RSoP to figure out what overlaps where, who overrides whom, you can get some things done correctly.

      The real answer is "GPOs break crappy legacy apps" and we're too lazy/broke to fix them. Once you identify what the real problems are, its easy to put the Legacy App users into their own OU, and exempt them from whatever 1 piece of your Security Policy breaks their app.

      I know business needs trump security policy, but it needs to be in very specific cases, not binary we can't have security anywhere because one group somewhere has one not very well defined need.

    7. Re:well... by Tekfactory · · Score: 2, Insightful

      You can create OUs of users in your location, and only apply GPOs to those users.

      You don't have to Bork all the field offices with a GPO. Now domain security policies I'd watch out for.

    8. Re:well... by Culture20 · · Score: 1

      for /f %X in ( ' type computerlist.txt ' ) do cmd /c start cmd /k psexec.exe \\%X -c ThingToRunOnRemoteMachines.bat

      Or just "psexec.exe @computerlist.txt [other arguments] ThingToRunOnRemoteMachines.bat", which accomplishes the same thing.

      Sort of, but the "start cmd /k" part opens a new cmd window for every computer. I should have posted a warning since 100's of computers could cause a few problems. There's a way to sleep/pause every X times you've gone through, but I don't have access to one of those scripts at the moment. The /k keeps the cmd window open so the results can be seen. The main reason to do this instead of the built-in "@" with psexec is if you've got only half of the computers online, psexec will take a long time trying to connect to all of the offline machines sequentially, whereas this allows concurrent running.

    9. Re:well... by bigstrat2003 · · Score: 1

      Ah, I didn't realize that would do things concurrently. Good to know!

      --
      "16MB (fuck off, MiB fascists)" - The Mighty Buzzard
  26. There is no typical number. by ground.zero.612 · · Score: 1

    The minimum number of help desk technicians required is always directly proportional to the total number of ID10-T users they are to support.

    --
    "Be prepared, son. That's my motto. Be prepared." --Joe Hallenbeck
  27. How tight or loose are group policies? by EsJay · · Score: 1

    Make user an admin on their own machine if you want to increase the IT staff. Lock down group policies if you are overworked.

    1. Re:How tight or loose are group policies? by vlm · · Score: 1

      Make user an admin on their own machine if you want to increase the IT staff. Lock down group policies if you are overworked.

      I think you meant:

      Make a stupid user an admin on their own machine if you want to increase the IT staff. Make a smart user an admin on their own machine if you are overworked. Make everyone an admin on their own machine if you're a contractor, for obvious self-enrichment reasons.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    2. Re:How tight or loose are group policies? by neurovish · · Score: 1

      Make user an admin on their own machine if you want to increase the IT staff. Lock down group policies if you are overworked.

      I think you meant:

      Make a stupid user an admin on their own machine if you want to increase the IT staff. Make a smart user an admin on their own machine if you are overworked. Make everyone an admin on their own machine if you're a contractor, for obvious self-enrichment reasons.

      Smart user? Might as well add in Santa Claus, the Easter Bunny, and the Tooth Fairy.

    3. Re:How tight or loose are group policies? by uglyduckling · · Score: 1

      Well, it can happen. My day job has nothing to do with IT other than regularly using email / web and word processing occasionally. But I have a background in IT and did a Computer Systems Engineering degree. When I make support calls I usually include a full description of the problem and step-by-step instructions on how to solve it. Most of the IT guys either love me or hate me. It's usually the guys that don't know how to do their jobs properly who hate me.

  28. Wrong context by FrozenGeek · · Score: 1

    Trying to determine whether you are understaffed by looking at ratios of IT staff to users (or computers) is not the correct way to go. It is the simple (minded) way, but it is not the correct way. Picking a particular ratio makes many gross assumptions about your environment.

    A better method is to review your workload: Are you run off your feet? Do you have to put in lots of OT? Are you spending your days simply fighting fires? If you found yourself answering "yes" to one or more of those questions, you are probably understaffed (I'll give you the benefit of the doubt and assume that you're not grossly incompetent 8^).

    That said, three guys for a fairly large shop does raise issues like vacations and sick leave. Three guys might be enough under normal circumstances. But will two guys be enough? Or one?

    --
    linquendum tondere
  29. It's normal by DavidIQ · · Score: 1

    We have about 400+ workstations with various OSs (Win 2000, XP, Vista, 7) and 20+ servers with various server OSs (Win Server 2000, 2003, 2008) and we only have the System Admin and a "sneaker tech". Oh and we have a remote location as well which they must deal with on the other coast of the US. At least from my viewpoint, your situation is not unusual.

  30. Understaffed by jon3k · · Score: 1

    6,100 employees 44 locations + 2 datacenters.

    3 admins (1 network 2 systems) and 2 helpdesk technicians

  31. Power of Scale by kenp2002 · · Score: 2, Informative

    The larger the corporation the more per\user per\server to admin. Theseare my observation sover the last 12 years in my career:

    For small corporations (less then 1 million) I usually see about 1/800 ratio for support\end user and 1/50 for servers.

    For medium corporations (greater then 1 million but less then 80 million in revenue) I usually seea bour 1/2000 ratio and 1/150 for servers.

    For large corporations (greater then 80 million) I see about 1/3800 and 1/250.

    Support metrics are usually driven by "Call Times" including resolve times and hold times so depending on the scale of the businesses and nature it isn't so much support/staff ratio but rather hold time\support ratio. ITIL was crafted specifically to facilitate outsourcing Incident Management (password resets and all that less then 15 minutes crap) to lower cost, drill down labor and maintaining low hold times versus Problem Management which is the higher skill set.

    Server ratio is largely due to "bucketing" of servers\apps to an admin resource (Think along the lines of an Account Rep). A.k.a Bob handles Apps A,B, and C along with Servers X, Y, and Z. So depending on the corporation you can have anywhere from 2-8 apps assigned to a single admin. Each application may maintain upwards of 5-12 servers depending on the size of the application. Smaller enterprises tend to have smaller "buckets". A typical LAMP stack may have 1-4 app servers, 1 NAS, 1 batch server, and possibly it's own database server. As you get larger those buckets share other buckets so you may have a team that handles just apache and another that handles just MYSQL\POSTGRES\etc. Those buckets can be huge. I have a team of 8 DBAs managing right now 2307 database instances. That is roughly 289 server instances per DBA. A simple table update may take 12 minutes for a structure update to process so median process time may factor into staffing requirements when concurrency isn't an option based on outage windows. Databases are virtual servers usually with a SAN hosted on hardware that is managed by another team but you can get the picture. By specializing administrative roles you can increase the nubmer of server or services supported by a person (power of scale) so the ratio of servers per tech tends to rise the bigger the corporation. In addition more expensive, comprehensive tools, become accessable to larger corporations (TIVOLI framework for instance.)

    Based on your description you should need:

    2 Call Center Incident Management crew
    2 Problem Management crew
    1 Senior Network Adminsitrator\Network Architect
    3 Junior Network Administrators
        1 of which is responsible for security\auditing
        1 of which is responsible for maintenance
        1 of which is special projects
        All three should rotate these roles quarterly or annually as well as rotate 1 as a Problem Management staffer (the non-special project members)

    So your total support crew should be about 8 people. You may also for off hours support want to outsource to a location 12 or 6 hours offset based on your location. (6 hours makes meetings more practical as you can usually get a meeting when one group is just getting in and the other is just getting ready to leave.)

    --
    -=[ Who Is John Galt? ]=-
    1. Re:Power of Scale by Anonymous Coward · · Score: 1, Insightful

      1/800 for a company with revenue of $1M... That's only $1250/user in revenue. I think it's pretty well impossible that a company is going to be supporting the infrastructure for 800 users on $1M. Throw in the 50 servers, and the numbers start looking real wonky.

    2. Re:Power of Scale by LodCrappo · · Score: 1

      how did this get modded informative? the numbers make no sense, the conclusions don't even jive with his own numbers, full of technobabble. i smell middle management.

      --
      -Lod
  32. Approximately 8000/1 for Sun's old desktop by An+dochasac · · Score: 1

    I helped deploy a configuration of Sun's older Linux based Java Desktop System which allowed install, upgrade and configuration of 8000 desktops across hundreds of branch offices. It wasn't widely reported because Sun dropped this Linux based desktop to allow more focus on its own kernel and Sun Ray technology which easily allows more users per administrator. For Sun Ray desktops on Solaris I would imagine the ratio can be at least 10,000 to one.

  33. Too much variation by jd142 · · Score: 1

    It really depends on who your users are, what your servers are doing, and what level of support is desired/needed by the organization.

    If you have 1000 users who use one app that they are all familiar with, user calls are going to be lower than an org with 20 different apps and a wide range of skills. In a large organization, you may be supporting everyone one from accountants who know Excel inside and an out to janitorial staff who are still using dial-up at home(seriously, they still are because they can't afford broadband) and have trouble using email.

    Same with server apps. 100 file servers with the same os are going to take fewer admins than 75 file servers running a variety of operating systems and doing file, print, database, web, email and proxy/vpn/remote access.

    Some orgs want techs to really know how the organization works so they can not only answer questions, but understand the business processes and be able to come up with new processes and services. They may also want that personal touch where you walk to the user's desk and help out. Other orgs are happy having basic phone support and making the users responsible for finding out the answers on their own.

  34. Track busy time, adjust accordingly by LoudMusic · · Score: 1

    While I was the sys admin for a small ad agency of 50 to 75 users (fluctuated monthly) my boss claimed that he read or spoke with other companies who were operating with a 50:1 ratio. Granted, ad agencies can be a bit unique with a very mixed technology environment and REALLY difficult users, but it worked for me. Most of the time I was fixing failed systems but I still had time to implement newer / better technology to resolve reoccurring issues.

    I think what a larger company needs is a support staff that is busy 80% of the day with some good down time, and then a fair number of individuals who are working on more permanent solutions to the bigger problems. There are too many variables involved to give a definitive ratio of users:admins, but the work load is key. You don't want those guys staying late every day, and you don't want them sitting around bored either.

    Probably the most effective thing to do would be to have them document their time somehow. There are apps to help with this. Guard against scaring them into giving you false information - sometimes employees fear that they are being watched and may falsify their claimed work load and you end up hiring people to compensate the inflated demand.

    --
    No sig for you. YOU GET NO SIG!
    1. Re:Track busy time, adjust accordingly by Xacid · · Score: 1

      "Guard against scaring them into giving you false information - sometimes employees fear that they are being watched and may falsify their claimed work load and you end up hiring people to compensate the inflated demand." This is a HUGE issue with trying to track time for task completion. People start seeing it as micromanagement instead of this information being used to see what the actual workload is. I think the key to this is to let the IT staff manage this data collection and present the final report quarterly to management - this way it's not management that appears to be like some overload, it's the IT group just tracking time per task. Although - there really should be a measure of how much time you spend measuring time. UGH.

    2. Re:Track busy time, adjust accordingly by LoudMusic · · Score: 1

      Hah, I actually put "filling out timesheet" on my timesheet ;) No one has questioned it yet ...

      --
      No sig for you. YOU GET NO SIG!
  35. Repost! (sorta) by Ken_g6 · · Score: 1

    OK, not exactly, but the same topic was recently discussed in the Uniforms post.

    --
    (T>t && O(n)--) == sqrt(666)
  36. "How Many Admins Per User?" by slicerwizard · · Score: 1

    Is the article writer suggesting there should be more admins than users?

  37. It depends on your SLA by Zorlon · · Score: 1

    As long as you manage expectations and, make management aware of the costs vs. risk.

    There are a lot of factors that determine the manpower needed:

    1) Are backups of files required by all users or just a few users (ie CEO, finance, hr etc)
    3) What is the expected work hours 24/7? or 8/5?
    4) How much redundancy is built into the servers? If they are in pairs then one can go down and be fixed during regular work hours.
    5) How is your storage set up ? Disk drives fail so you will need RAID, mirroring etc
    6) Have the servers been properly maintained ? A lot of times applications are put on servers without correct startup and shutdown scripts. If there is a power outage and the servers are cycled they should come up correctly with all applications.
    7) Do you have a monitoring system in place to try to catch problems before they become catastrophic failures.
    8) Do you have good configuration management so that the systems are as identical as possible.
    9) Do you have routine maintenance items automated - this is easier if you have item 8 above.

    All of these have cost and risk associated with them so it is important to go over them with management. You can explain how if you don't have a decent backup plan then data can get "lost."

    --
    - Things are the way they are because they're coded that way -
  38. My Numbers by clawhound · · Score: 1

    I used to handle about 400 hundred people and 400 boxes as a sneaker admin. So two folks for PCs and one for servers is workable -IF- you have your act together.

    My suspicion is that you all are a bit low. Reasons:
    - People get sick.
    - People take vacations.
    - You need to cross-train each other.
    - Special projects can and do come up.
    - There are under-met needs in the company.

    To get the person that you need, you really need to show the business case for it. Once you can do that, ratios don't matter.

  39. Eight Thousand by afortaleza · · Score: 1

    I've worked in a school for 2 years and they had 1 admin for eight thousand people among workers and students who used the school's network.

    1. Re:Eight Thousand by Culture20 · · Score: 1

      8000 users, but how many computers? I'm betting it's close to only 200 computers, and they're all totally locked down and the same image.

  40. 100-150:1 was a good ratio by Pontiac · · Score: 1

    When I did desktop support we had 100-150 users per admin.
    The load depended on the department.. The guy supporting the executive offices was at 50:1 and hammered most of the time.
    You can push those numbers higher but then all you do is fight fires, projects don't get done and vacation coverage is a nightmare.
    We came up with a chart at one point classifying each department as low medium, high and VIP(CIO,CEO,CTO, VP and so on).. Low was counted as 0.5 users
    medium 1 , high 2, VIP level counts for 3. The admin supporting the nursing staff had 250+ real users but they don't put in many calls so it all balanced out.

    For Server support I like to have 3 admins just so we have coverage for sick time, vacation and on call rotation.
    It's hard to justify 3 with only 25 boxes so one could be a dual role as desktop lead/server admin.
    It's always nice to have a guy playing desktop and server to keep communication open between the groups.

    --
    If you think it's expensive to hire a professional to do the job, wait until you hire an amateur. --Red Adair
  41. Funny you ask... by Xacid · · Score: 1

    This was actually a recent topic over where I'm working at and we were trying to figure out a way to explain that we needed another person. We went the route of trying to find this magical industry average and like everyone else is saying "it depends". For our level of support and configuration here - 1 admin per 75 windows workstations seems to be the magic number. Right now we're at about 1 per 150.

    However, "industry average" doesn't mean jack to the client. It's kind of like saying to them "well Joe has a Ferrari, therefore we need one too". The spenders want measurements (aka: "metrics"). For IT guys who are used to instantaneously jumping up to fix every problem the minute it comes to their attention - this will drive them nuts: what you'd need to do is measure your response time and time certain tasks take. Show them how many resources you manage. Our client couldn't believe we were supporting 300 machines. "I thought we only had like a hundred". They also had no idea how long it took to set up a new computer for a user. They figured it to be relatively instant, no factoring the time to carry it over, to tear down old equipment or clean off a table, add the user accounts, run the location's security patches, transfer old data, to build the initial image, etc. We found out we take an average of 3.45 hours per machine for an upgrade (moving gigs of data and making the master image averaged out per machine were the main hogs of time).

    So "it depends" really applies to your question too when asking "what are you trying to say with this information?" Are you trying to justify the addition of a new employee or explain why response time has dropped significantly, for example? You'll want to be able to paint a picture that'll relate to their dollars. You'll want to be able to answer this when they ask "Will my decision to [add employee, upgrade software, whatever] affect cost (dollars and man-hours), scheduling (time to complete/react to situations), or performance (quality of product/service)?"

    1. Re:Funny you ask... by aarenz · · Score: 1

      Just like to add that the biggest waste of time for staff that I have worked for is food chaining hardware. It seems that department A hired a new person and there is not a computer for them. Well the manager of that department has a computer that is 9 months old, so they need to get the new one and that computer has to get moved down to the new employee. This gets even worse when you get to people and laptops due to all of the extra stuff they have put on the machine to keep the kids busy on those family trips, usually requires full re-image of the machine before moving to next person so the system does not yell for the freddy fish disk every time it boots.

      Would be nice to upgrade the people that use their computers the most so they do not have to deal with slow loading software. That would be the best use of resources.

      As others have said, it depends on software and user base. We have 7 field people and 10 other sysadmin, DBA, Dev types to support 1,000 users in 15 locations. I think it is not enough given the industry specific software that needs a lot of attention. We get by, so there is little need to add staff. Tricky balance to not get by and not get fired so you can get more staff.

  42. about one per 2500 seats by vlm · · Score: 1

    One place I worked in the 90s, about 100K seats, about 10 HD on the phones, about 15 field techs, about 5 WAN guys (myself and 4 others), about about 10 operators / system programmers / unix guys, works out to about 1:2500.

    This was an IBM mainframe shop handling about 5% of all retail stock transactions worldwide on "dumb" terminals. If they didn't demand 24x7 coverage to handle worldwide markets, it would have been somewhat cheaper as we often staffed for "just in case". Having someone on pager was unacceptable per the SLAs and marketing, so we had to be on site, so they had to hire more people, even if all we did was read technical manuals all night (IBM had some pretty good textbooks for ATM networking, assembly language, COBOL, and a few others)... The IBM onsite engineer mostly did hardware work, everything was triple to quad redundant, and that redundancy was often tested and the customers never knew...

    I guess those pesky PCs need one per 100 to 300 PCs to get an "acceptable level of service", for a PC anyway.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  43. Re:standard is supposed to be 185 to warrant on-si by Xacid · · Score: 1

    I don't envy you, sir.

  44. That's kind of funny... by m6ack · · Score: 1

    That's kind of funny... 900 CPU's (clients) and 2600 users for you? At our place of business, we have much more like a 2:1 ratio of CPU's to people... Not counting VPN connected foreign hosts... How does it work out that you have fewer than 1:1? Are you leaving out dumb terminals and network connected embedded systems?

  45. The answer will depend on the network complexity by OutputLogic · · Score: 1

    The answer would vary depending on the complexity of the network. A semiconductor company with mixed win/lin network and lots of different types of servers will likely to require many more IT personnel than an accounting firm of the same size but more "homogeneous" network. That's probably why there isn't much statistics on the average tech per user/computer.

  46. Depends on how you count it. by stonecypher · · Score: 1

    When I was there, RUCS (Rutgers University Computing Services) ran a campus of around 18k people from four active student admins and eleven never-seen never-active bureacratic staff. So that gives a ratio of about 4500:1. It's worse if you consider time of day, though: that was three during the day (6000:1) and one at night (18000:1).

    Disclaimer: it's been almost 15 years, the school's size may have changed, and there's an outside chance that RUCS might have gotten rid of their dead weight and gotten their shit together.

    --
    StoneCypher is Full of BS
  47. The answer is UNIQUE by Lockster · · Score: 1

    As others have said, it really does depend on the work-load.
    Some have suggested at 1:75 is "low" - for me, based on the workload my staff have, that's *high!!*

    I have 4 groups supporting various workloads in various geographies.
    They range from as low as 1:20 to as high as 1:70
    For us, the /number/ of users we support isn't the issue - it's the workload those users generate. Some part of that is due to the types of applications we support at each site. Some of it are just the demands some of those departments put on us (e.g. continual last minute requests). Some groups are highly self-sufficient. Others rely on IT day-to-day to help develop solutions to increase their own productivity.

    I've asked the same question the original poster asked for years - what's the "right ratio?" The answer is: it's unique.

  48. Admin/Server Ratio?(please contribute if possible) by jr76 · · Score: 1

    Hello, I cannot give my numbers but I'm pretty damn sure my site is incredibly understaffed, so I'm really curious on how it is done on other sites. I know this article is touching the desktop side of things, but if you can give some input on the ratio for admin/servers, it would be appreciated.

  49. 9,000ish machines to 6 people by jrottman · · Score: 1

    We have 1 central office, and 61 schools across the country. All technical support comes from our central office. For the client aspect we have 2 system administrators, and 4 Helpdesk technicians. We have 2,400 Windows 7 desktops/laptops, about 7,000 thin clients, and 72 Windows 2003 terminal servers. We are forced to design our systems and infrastructure to be very hands off in order to support these numbers. We automate everything we can.

  50. 1 IT staff per... by Spazmania · · Score: 2, Informative

    You need 1 IT staff (helpdesk, sysadmin, etc.) per:

    20 Windows servers
    50 Linux servers
    100 full time computer users
    1000 part time computer users

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
    1. Re:1 IT staff per... by kainewynd2 · · Score: 1

      I hope those are separate line items and not a list of things one person is supposed to handle... user support != server support.

      I could manage a few hundred, maybe a thousand servers if I had set them up correctly, but I'll be goddamned if I'll support 1,000 part time staff by myself...

      --
      I just don't get... eh, ugh... never mind. This post wasn't worth the research I put into it.
    2. Re:1 IT staff per... by Spazmania · · Score: 1

      Part-time in this context means the user doesn't use the computer all the time during their work process. Like a guy who stocks shelves and then makes entries in the inventory computer. It can also mean that they use a computer all the time only part of which are the computing resources you're responsible for. Like users of an ISP.

      The OP noted that he has 2600 workers but only 900 computers. That means at least 1700 of the workers are part-time computer users.

      You could manage a server cluster of substantial size, perhaps thousands of nodes, but managing more than 100 distinct servers would stretch you very thin. It's also fair to note that there tends to be far less automation involved in the process of managing a Windows server, so you get fewer servers per admin.

      --
      Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  51. Yes by CPNABEND · · Score: 1

    Yes, you are seriously understaffed. And yes, it is normal ;-)

    --
    My wife doesn't listen to me either...
  52. both by computerdork · · Score: 1

    I would say you are seriously understaffed, and that is completely normal. I.T. sucks. I got out of that field to pursue electrical engineering.

  53. Really depends on where you are by Darkness404 · · Score: 1

    It really depends on where you are to what you need. Do you have people who never want any other software installed? Or do you have people who -need- various programs or want some to get the job done easier. Do you provide -all- your own hardware, or do people occasionally bring in faster printers so they don't spend all day printing? What about viruses? Are they a big deal? If say, 25 computers go down in a day due to something like a power surge will that seriously affect productivity? Are these systems running similar hardware or are they a mismatch of various cheap systems? Will these systems need hardware upgrades? If you have systems that are really static and won't need many more things done to them, yeah, 1 sysadmin and 2 sneaker techs might work. If you have systems that are dynamic with software changes, hardware changes, or computer systems that aren't identical, it could really help to increase the number of sneaker techs. In most cases one sysadmin is all you really need, but bumping up the number of decent sneaker techs you have really helps increase productivity, few things are more annoying than trying to fix someone else's machine and then someone "higher up" thinks you should drop everything and fix their computer (when really in reality they don't need their computer to begin with....).

    --
    Taxation is legalized theft, no more, no less.
  54. Staffing levels by wolfguru · · Score: 1

    How many admins does it take to change the light bulb in the monitor? I would say more depends on your environment as far as the applications, level of demand, tolerance for downtime/repair time and responsiveness than on the simple number of systems you support. I'm the IT manager for a company with around 500 employees, but only about 150-175 of them are really computer users as part of their job. We have 30+ servers in the "admin" network and another 12-15 in the departmental network that supports out prepress operation. We run monitoring, process control, list processing and logistics systems, as well as the range of business applications and financials common to any organization. My current staff is two, including myself. The main thing is how well your processes are constructed, how well monitored for pre-emptive response, and how well you manage the time and resources to fill the support needs of the company. No formula of X number of techs for Y number of users, Z number of computers and K of servers is going to give you anything like an accurate estimate, because it lacks the essential parameters for how much work the functions you are required to handle actually require. Someone else stated it fairly succinctly - if you are able to meet the needs, you have enough people. If you don't have time to support and monitor the systems because you're too busy putting out fires, you could have 1. too few people, or mosre likely, 2. poor processes for getting the job done and staying aware of the conditions that cause the problems in the first place. Its often easier to do the same thing more than do the better thing. It takes more insight into how to get the results the best and most efficient way to improve the process and get it done with better equipped, trained and directed staff. I'd start with a review of what gets the job done better, and staff for that.

  55. At one Fortune 500 company... by RogueWarrior65 · · Score: 1

    At a Fortune 500 company where I worked a few years back, the user-to-IT ratio for Windows users was about 4 to 1. On the Macintosh side it was about 100 to 1 although a 50 to 1 ratio is probably better.

  56. Depends on your workload, look at getting some i by Vrtigo1 · · Score: 1

    It's the same as any other department in your organization. If you have one sales guy and he's working 60 hour weeks every week to maintain the status quo, then maybe you should look at hiring another sales guy. Same thing for IT. A lot of it will depend on how much can be centrally managed/fixed from your desk/PDA and how much time you actually have to go and spend helping users one on one. We have about 90 users and 25 servers with one network guy (me) that also handles user support, one dba/app developer, and one manager that interfaces with the rest of the org to allocate our resources. If we were able to hire someone else, it would probably be another developer because that's where our shop sees the biggest backlog of work. Our developer spends most of his time maintaining existing apps, so he has very little time to develop new apps. I think the biggest factors that affect the answer to your question are 1) user skill levels 2) your power user's willingness to help their coworkers 3) having a centralized helpdesk/issue tracking software where users report problems and you keep track of everything that needs fixing and prioritize, and 4) your ability to fix problems from where ever you happen to be (office, home, Blackberry, iPhone, etc). One thing I've found helpful is interns...many times you can call down to your local community college or university and get setup with their work study program. Most of the time the interns they send you will work for free, and they're perfectly able to Ghost systems and remove spyware, freeing you up to do more important tasks.

  57. Numbers... by farrellj · · Score: 1

    Well, the number I usually hear in the industry is 1 SysAdmin per:

    10 Windows Servers
    100 Unix/Linux servers

    I think that the numbers are little low, and maybe too idealistic...Depending on the application, I could *easily* see one competent SysAdmin managing at least three times those numbers. Of Course, that is the rub, a competent SysAdmin. A *good* SysAdmin could probably increase the original numbers by a factor of ten. But then you start running into the "run over by a bus" syndrome...if a *good* SysAdmin can do that, what happens if they get run over by a bus? Many times companies take too much advantage of a *good* SysAdmin, and then when they leave/burnout/get hit by a bus, they spend months (years?) trying to replace that person with just one body, when the reality is that they may need two, three or more people to replace a *good* SysAdmin. I watched it happen at a company I worked for...when I left, they kept on burning out SysAdmins, and every two or three months, they would be advertising for a replacement SysAdmin. Oh, yes, I was also doing development work in addition to my SysAdmin duties. A Co-work's opinion was that it would take at least 3 people to replace me.

    ttyl
              Farrell

    --
    CAN-CON 2019 - Ottawa's only book oriented Science Fiction Convention! October 18-20, Sheraton Hotel, Ottawa, Canada h
  58. No conclusive answer possible by The_jos · · Score: 1
    I've worked for a large govt organisation with 6000+ users, which had 4 field engineers for remote locations (about 2000 users) and 15 sneakers for the other 4000 at their main location. Add about 10 helpdesk employees and 20+ network/server admins and you get an idea. However, this staff was needed because the huge amount of different applications run there.

    Another site I worked at had 4 people at HD, 2 server admins, 1 network admin and 2 or 3 sneakers on each of two locations. Roughly 600 users

    I'd say it's all about the number of service requests you get and the complexity of the IT environment and not absolute numbers.

    Add SLA's and what users/management expect to determine if you are understaffed or not.

  59. Re:Depends on your workload, look at getting some by Vrtigo1 · · Score: 1

    Oh, and another thing...most employees operate with impunity when it comes to getting their PCs all spyware'd out. If you can change that, it will help drastically. If you find that you're wasting a lot of time removing spyware and cleaning up the mess from webshots and all the other crapware employees like to download, I think you'll find that your spyware volume will fall off sharply if you can get management approval to start charging your spyware cleanup time back to the employee's department. Once the department head has a talk with their employee about how they don't want to see another 5 hour charge for removing Troj.Vundo, the employee will be much more careful about what he/she chooses to download at work.

  60. It's not that simple by nixdroid · · Score: 2, Informative

    The number of admins needed in any shop depends on many factors, especially automation and duplication. In an ad-hoc environment where users are given free rein, you will need lots of admins. If management will support restrictions on users, the admins are creative and the necessary tools are purchased, then the job can be handled by a few astute individuals. If anyone knows of such a shop...

    --
    -- Consensus - 50% probability that the majority are wrong.
  61. On the UNIX(tm) side of things... by McNihil · · Score: 1

    at least 1000 servers per admin.

    1. Re:On the UNIX(tm) side of things... by selven · · Score: 1

      The next kernel update will make it 4096 servers per admin. But still no full screen Flash support, though.

  62. You didn't mention if you were busy by agentc0re · · Score: 1

    Are you busy? Just because you've posted the question doesn't necessarily mean that you are. Bodies usually are warranted on a need basis not based on how many of X that you have. In a small shop you're probably going to have a mixture, like I do. We have 110 Employee's, 12 Windows servers(2 DC's, 1 SQL, 1 X-CHNG), 6 linux servers(2 are XenServer Hosts, 1 Firewall). We both handle everything, neither of us are assigned to just do Servers and the other to answer the phone. Honestly we hardly get phone calls, and when we do the Tech Support dice could answer the question(no joke). Usually simple stuff. I've been more busy with server maintenance than anything.

    Anyways, the point is how busy are you? Is some of the slack not being picked up by other tech's? If I was also judge this based on machine count it would be around 50 to 60 machines per Tech. Probably around 500 Machines warrants the segregation of Tech's(phone and email support) and Sys/Network Admin.

    --
    Sometimes, the answer is to just destroy it all.
  63. Former ISP- Medium Network and manyPhysical POPs by duanes1967 · · Score: 1

    As a former Regional ISP with full email, webhosting and News services, we started at 1 tech for 150 users in 1995 when we had to talk each user through the install of trumpet winsock and ftp download of Netscape (or physically go to their house and do it). Later this moved to 250:1 and this included supporting Windows 3.11/winsock and Win95 on 4MB of RAM plus issues such as how to click a mouse, what is a modem, my printer won't print, and Packard-Bell (need I say more). With WinXP and DSL, this moved to about 500:1 and still includes support on reloading Windows, printers, virus detection and removal. Not to mention, much more involved mail and web hosting issues. As for admins - Telecom needed 1 per 2000 dialup lines or DSL users or 300 hi-cap circuits, Network 1 per 100 dedicated customers and SysAdmins at 1 per 60 servers if they run a broad range of services or 150 servers if they run similar services or 500+ servers if they are identical services. Windows versus Linux doesn't make as much difference as it used to because Windows has fairly robust scripting available if you learn it.... but in general, Windows will up your admin needs 30% because few people know how to use extensive scripting on a win server. Current ISP's generally limit support to services sold and need half of less of the resources. The bottom line, resources depend heavily on exactly what you support, the tech level of the user, and how diverse their hardware is.

  64. Deployable Enterprise... by Lifyre · · Score: 1

    I run two isolated networks for roughly 300 users (about 600 accounts between the networks) over multiple isolated geographical locations (you have to convoy between them) with 2 admins and 5 sneaker techs. We run about 200 computers, 4-6 servers, and multiple wireless interconnects with associated equipment. Of course being military makes for special requirements.

    --
    I'll meet you at the intersection of "Should be" and "Reality"
  65. Up to 200 or as low as 25 by Yiliar · · Score: 1
    I have managed UNIX desktops and servers for about 26 years. It really does 'depend'. Here are the salient factors:

    1. Does the administrator have complete control?

    2. Can the servers/desktops run effectively as diskless or thin clients?

    3. Are all servers installed from the same base image/jumpstart/kickstart?

    4. Are patches tested and maintained across all platforms on a regular interval?

    In a perfect world, all 4 are true. Under those conditions it is possible to manage 200 UNIX/Linux server systems per admin. Given thin or diskless clients, the number of desktops supportable per admin is very high.

    The worst case scenario is when all systems are different and carelessly maintained. The number can drop to 25 per admin on busy/active systems.

  66. We run 800/admin by uslinux.net · · Score: 1

    We've got ~2800 RHEL4 and 5 servers and ~400 VMware ESX servers and 4 admins. The key is homogenity.

  67. Depends on how many windows stations removed by SgtChaireBourne · · Score: 2, Informative

    It depends on how many Windows desktops you are able to replace with Macintosh OS X, Solaris or Linux. Seriously. Windows isn't around because of it's technical merits.

    I have worked in help desk environments in the past for a Windows / Macintosh / Solaris computing environment. The Solaris users largely took care of themselves, but contacted us for some settings information, like establishing the right settings for Kerberos, LDAP, AFS, or SMTP. The Mac users outnumbered everyone else by at least 4 to 1. However, it was the Windows users that wasted about 80% of our time for drop in help. Even cloned setups on identical hardware had different problems. Drivers were a big one. For phone calls, it was a bit higher in number of Windows user contacts but a bit shorter in duration for each one.

    I did family tech support for years until I had enough and bought anyone who was willing new Apples. Only my mom took me up, but her support calls dropped off to nothing within days and now we can talk about other things for a change.

    I've visited and toured libraries and schools using LTSP. One of those was stuck with some windows machines. The effort to keep the few Windows machines going was about, from their statistics, about 14:1 compared to LTSP. That ratio would probably been higher if they had even higher ration of Linux stations. The others cited even more favorable rates.

    Getting rid of Windows is mostly a psychological problem. First, users have to become familiar enough with computers to be able to do their daily tasks. Having knowlegeable staff on the spot to nudge in the right direction is essential, as is encouraging peer support. Then they need to keep access to the Windows machines and try to do on Windows what they can do on computers. Then they eventually decide on their own, 'fuck it' regarding the Windows use and drop it without looking back.

    The real question is are you always constantly working your ass off, fixing stupid problems - and therefore unable to do anything more productive? If so, then it seems you don't have enough people.

    Setting the 'right' staffing levels, then depends on how much you can clean up the computing environment. I for one am offended that so much money and time is wasted just trying get the M$ stuff to work as well as its competitors. I would much rather see the same number of staff hours used not for support but for improvement and making things faster, easier, more productive. Before Windows, IT used to save effort rather than a live demo of the Red Queen's Race!

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
    1. Re:Depends on how many windows stations removed by hesiod · · Score: 1

      If the answer to the first statement is close to or at zero, then you've wasted a lot of breath... er, typing. There are plenty of organizations that simply cannot use anything but Windows because they software they need to use has no Linux, Solaris, or Mac alternatives, or perhaps just no good ones. Or perhaps certain hardware you need that requires Windows on it, or a Windows device to attach to. Working in a hospital, I know that there are many examples of this.

      It's just not as simple as you seem to be suggesting it is -- if it's possible at all. Not to mention the immense cost in money and time to replace/reinstall your entire information system.

    2. Re:Depends on how many windows stations removed by AK+Marc · · Score: 1

      However, it was the Windows users that wasted about 80% of our time for drop in help. Even cloned setups on identical hardware had different problems. Drivers were a big one.

      Then you were doing it wrong. Most computer companies don't support imaging. Why? Because they want to replace some chip with something cheaper and not have to change the model number. So, pay 50% more on each machine for the hardware, and get a business line that supports imaging. That means that the company making it will make an effort to not do the stupid chip swaps mid run that make an image from "identical hardware" not work. Unless you are building them yourselves (which I think actually ends up working better, even in 1000+ computer shops, but no one else seems to think so, so either Dell marketing wins, or I'm missing something), get the higher cost business line and you'll get better results. I've seen it work right with Compaq, Dell and HP lines, though the Compaq/HP ones were before merger and HP's official stance was "we don't support imaging of any kind" but their unofficial policy was "we want to make imaging work if at all possible or the customers will go elsewhere."

    3. Re:Depends on how many windows stations removed by SgtChaireBourne · · Score: 1

      Working in a hospital, I know that there are many examples of this.

      That wasn't the case 10 years ago. However, if it looks like it might be the case now. If you can prove it you might be able to prosecute and make criminal charges of it.

      I know of one hospital where MS Exchange was not only shoe-horned into the infrastructure, but even tied into the voice mail / pbx. Neither use case has a legitimate place for Windows.

      It comes down to the fact that if there are claims that some activities depends on Windows product, then someone is doing something very wrong, perhaps criminally wrong.

      --
      Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
    4. Re:Depends on how many windows stations removed by Arthur+Grumbine · · Score: 1

      I really wanted to, using rational discourse, explain the absurdity of your claims regarding the criminality of using MS products, but I realized that it would be more productive if you could just show us, using this doll, where Windows touched you.

      --
      Now that I think about it, I'm pretty sure everything I just said is completely wrong.
    5. Re:Depends on how many windows stations removed by AK+Marc · · Score: 1

      However, if a shop is so expertise-deficient that they have deployed Windows,

      When you think the shop determines the OS, and not the management demanding it because that's what everyone else uses, then you are either the best CIO ever, or a complete idiot. Go to any place and say "I'd like to throw away your expensive Windows and replace it with free stuff some guy wrote in his garage" and see if you keep your job. And, from what most people hear, that's what Linux is.

  68. Depends... by MortenMW · · Score: 1

    A school I worked at: - 1500 users - ~1000 computers - 3 techs Other place I worked: - 100 users - 5 techs Now: - 70 users - 3 techs

  69. Quality vs Quantity vs SLA by Mojo66 · · Score: 1

    The ratio depends on at least three factors: a) How organized you are b) How mission critical the systems are c) The degree of homogenity your envirenment allows you For example I have worked in a research environment with AIX desktops and servers, and 6 people were easily able to administer 2000+ systems due to the fact that we handed out local admin passwords for those who were willing and able. When I was working for a high profile company, we were 3 admins for 100 mission critical HP/UX boxes. Both environments allowed for a high degree of efficiency due to the homogenous systems. OTOH I've seen a 12 men sloppy IT department with mixed Windows XP and Linux desktops and servers, having trouble keeping up with 250 users at a local University...

  70. Be sure to get a ticketing system by adam525 · · Score: 1

    I used to work at a telco and 2 of us supported about 100 users. It got WAY out of hand because they would just call us or email us if they had a problem. There was no way to prioritize the work that had to be done. If you got a call in the morning on a problem that would take most of the day, and then got calls for things that were minor (in terms of TTR), a lot of time was wasted. I now do basically the same thing at another company and we use a ticketing system. We rarely, if ever, run into those problems. Even if we did, we'd have more time to deal with it, because everyone MUST put in a ticket when they have an issue. If you aren't using a system like this now it will require that you talk to some higher-ups about getting a system implemented and there will be policy change at the company, but the people that you are pushing the idea to should immediately see the benefits.

  71. Facebook: 1 engineer per million users by miller60 · · Score: 2, Insightful

    Jeff Rothschild, the vice president of technology at Facebook, said in a recent presentation that Facebook has 230 engineers supporting data for more than 300 million users. He says Facebook seeks to maintain a ratio of one engineer for 1 million or more users. Facebook is vague about exactly how many servers it has, saying it's "more than 30,000." But at 30,000 servers and 230 engineers, that's a ratio of about 130 servers per admin.

    Microsoft says it has automated its data center operations to the point where its admins can each manage between 1,000 and 2,000 servers. That matters, as the company may pack more than 300,000 servers into its new container data center in Chicago. It expects to support that facility with about 30 employees, including admins and facility maintenance staff.

    1. Re:Facebook: 1 engineer per million users by AeroNGNR · · Score: 1

      This ratio really doesn't represent the issue asked. The 'users' of Facebook maintain their own computers and so the server farm is a different animal to handle. I understood the question to be more along the lines of how many business level users, their machines, and related servers, should an IT dept. handle. I contend that teaching the user to fish instead of giving them a fish will be the future of computing, unless you plan on creating and maintaining two seperate classes of employees. Those who can use a computer and those who maintain the computer. Every user should know enough to 1)keep from screwing up their machine and 2) know enough to fix the simple isses. Admins are for problems that can't be readily solved by a reasonably adept user or one that affects all users.

    2. Re:Facebook: 1 engineer per million users by Capt+James+McCarthy · · Score: 3, Insightful

      Jeff Rothschild, the vice president of technology at Facebook, said in a recent presentation that Facebook has 230 engineers supporting data for more than 300 million users. He says Facebook seeks to maintain a ratio of one engineer for 1 million or more users. Facebook is vague about exactly how many servers it has, saying it's "more than 30,000." But at 30,000 servers and 230 engineers, that's a ratio of about 130 servers per admin.

      Microsoft says it has automated its data center operations to the point where its admins can each manage between 1,000 and 2,000 servers. That matters, as the company may pack more than 300,000 servers into its new container data center in Chicago. It expects to support that facility with about 30 employees, including admins and facility maintenance staff.

      "Number of servers per admin" is to limited to be properly measured, even in your examples. Can one admin manage 5000 *nix boxes that are all identical, running a clustered web server? Sure. Given the proper engineering and tools, it's very possible. Now throw in a bunch of other applications that users request or a business requires and now you will need more staff. Also, supporting a bunch of pizza boxes or supporting one piece of heavy iron can make a difference is trying to measure this number. I know of a couple of folks who admin one box. Granted, they are either a large SUN and IBM hardware, running databases, web servers, and numerous applications, but look at their job requirement in a slanted way and it would look as though they are responsible for only one system. While another admin can have a couple of thousand desktops all identical and simple. And their value would still be relative to whomever the users are.

      --
      There are no loopholes. It's either legal or it's not.
  72. It depends by tinker_taylor · · Score: 1

    In my current shop, we manage close to 400 os images, about 200+ servers, > .5 Petabytes of Storage, > 20TB of backups/day and have only 5 FTEs and 2 contractors.

    A lot of the FTE to Server/User ratio depends on how organized your shop is. If you have managed to automate most of your SA activities, it's not unusual for 3-4 FTEs to manage a 1000 server shop.

    The key words are:

    1) Standardization of platform (have at the most 2 or 3 platforms, chosen for specific roles)
    2) Standardization of OS/Build (have 2 or 3 OSes you can manage well, eg: Solaris, Linux)
    3) Standardized Architecture (define your architecture and stick to it -- SAN, TAN, etc)
    4) Automation tools (such as a good monitoring solution, Fault Management system, etc)
    5) A good analytics tool (such as splunk, which will simplify your life with automatic log indexing, parsing).

    In an organization with centralized resources (trends have been gravitating towards centralized infrastructure, datacenter consolidation etc), this becomes easier. In a distributed IT shop it is harder.

  73. very similar situation to yours by benburns89 · · Score: 1

    What you described is almost exactly like my university - about 2800 total users, managing around 900-1000 computers. Lots of servers. This is what we have: 4 "systems support" (desktop, laptop, user stuff) 4 network/server/that kind of thing 3 or 4 help desk 2 or 3 for telecom about 6 for remaining tasks: web, software, management, etc. Now, we also have about 16 part time student workers for systems support, 4 for network/server, and 8 for help desk. I can attest that at times the 16 is overkill, but most of the time they are fixing small problems.

  74. Chemical Company by KDEnut · · Score: 1

    2 Managers 2 Techs (1 part time) ~15 servers ~250 users But we outsource/leverage quite a substantial amount from other business units in our platform. (Basically anything software wise is leveraged, we handle site-specific software and 95% of the hardware).

  75. US Army Doctrine by nstickney · · Score: 1

    The United States Army teaches that you need three to one odds to attempt an offensive maneuver....

  76. CAD by pipingguy · · Score: 1

    For some CAD setups it can be up to 7% of the project's drafting budget.

  77. It Depends by zero_out · · Score: 1

    It really depends on the industry, the shop, management, and users. However, when I was a server/desktop admin at an architectural firm, there was a book published every year that gathered lots and lots of IT management stats from various companies in the field. It encompassed staff sizes, experience levels, money spent on hardware, money spent on licenses, etc. It was extremely granular and gathered data from industry leaders as well as average and below-average firms. You could then do your own metrics and compare them with the published data. This was very useful when it came to dealing with management. I wish I knew the name of the book. There may be something out there for your particular industry, but you'll need to look around and talk to your counterparts at various IT shops within your industry. In fact, there was also a yearly conference where you could network with other IT personnel within the architecture industry from around the country. My manager found it extremely useful to hear how other shops were solving problems, and sometimes to simply hear that we weren't alone in our challenges.

  78. The Big Question by skelly33 · · Score: 1

    ... to me, the big questions are:

    A) Is your backlog growing hopelessly longer?

    B) Are you working too many hours every day (>10)?

    C) Do you get requests that your team doesn't have the expertise for?

    If the answer to any of the above is YES, then you probably need additional help. A manager needs to be able to recognize when things are under control and staff accordingly.

  79. I want a team by Moxon · · Score: 1

    I wouldn't accept a job where I'd be the only admin. For one thing, the company won't be set to handle my vacation time or any sick leave in a way I'm comfortable with. More importantly, I find that being the only guy who works with something gets old fast. I want someone to discuss ideas with who actually understand what I'm saying and can provide valuable input.

  80. The ratio is not the issue by whoisearth · · Score: 1

    The ratio isn't really what's at issue because that can vary due to the business you're in. What's the bigger concern is that the IT staff overlaps that's what I draw to be the biggest problem where I work. Our system support staff is responsible for end user support, network support, telecom support and server support. However: Telecom support is only responsible for telephones Network support is only responsible for networks Server support is only responsible for servers That's find and dandy for the other departments, but for us poor shlubs in system support we're overworked and underpaid. The CIO of our company said once that he expected at least 900 or so end users per IT staff. My location alone, I support around 200+ users with varying levels of support from co-workers and people on other teams. This also includes our servers, our phones, our networks.

  81. Below acceptable by xSauronx · · Score: 1

    I think it's below acceptable unless you are really on the ball and have a lot of things automated and properly organized and little to no emergency troubleshooting to deal with. At the community college I attend there is one Network Admin and 2 help desk goons. Admin *only* deals with network-related problems and basic telephone system issues. Helpdesk just helps out with end-user workstation issues. They seem to get along well enough, but the admin has lots of old software and hardware and an old PBX to deal with, and desperately needs a qualified assistant. Im working as his assistant with the work-study program but Im not experienced or knowledgeable enough to help the way he really needs it. I can deal with maybe 30% or 40% of what is on his "to do" list considering the limited access and experienced I have.

    Now, he said at another school years ago he managed 2500 PCs by himself with a handful of work-study students, but my understanding is that the network was in better shape than where he is presently.

    --
    By and large, language is a tool for concealing the truth. -- George Carlin
  82. 366:1, but depends on industry by antares256 · · Score: 1

    366:1 includes management and combined positions. Public sector (at least city, county, school, state) tends to have more systems and less techs. My shop is a public sector shop.

    Our system/facility counts:
    ~1100 desktops/laptops
    ~45 network switches
    ~10 physical servers
    ~10 virtual servers
    4 storage systems
    1 managed wireless system
    7 schools, 4 admin buildings, ~2300 students, ~500 teachers/staff

    Our personnel:
    1 manager/DBA/server admin/network admin (combined position)
    2 FTE tech support on staff now
    1 open tech support position (open since September, and open from Feb-August prior to that)

    Our biggest problem is we can't pay nearly what a corporate environment can offer, even though there tends to be far more individual responsibility in our positions. If I chose to work in a corporate environment, I could easily be making twice my current salary with my experience, education, and knowledge. But then I'd be bound by constraints the education field doesn't have.

    The job situation in our area is also the reverse of the rest of the U.S., if you want a job (even one that can pay 6 figures), you just need to have a pulse, pass a drug test, and be willing to work on an oil drilling rig. They even have tech related jobs that pay in that range.

    We run a software/hardware management system and centralized imaging system. It saves us a lot of time/hassle, but still can't take the place of one or two people, especially a higher-level server/network admin or DBA.

    When we compare to other schools our size and larger in our state, those schools tend to have a better ratio of systems:techs.

  83. From a school system by MTinCT · · Score: 1

    We have 9 people to take care of around 3000 users with over 11,000 computers. We are a school system of 17 high schools and 5 offsite locations. At one point we were down to four people. Our schools are a state school system so they are spread across the state. The 9 of us do it all. Network, servers, computer support, etc. I do most of the switch work since I am the "Cisco guy" of our crew. So those of you who think your struggling with a hundred users or computers, count yourselves lucky! SMS, RDP and VNC = three sanity saving tools!

  84. Ask BLS by kbielefe · · Score: 1

    According to the Bureau of Labor Statistics, 565,700 out of approximately 145 million jobs in the United States last year were for computer support. That's one of every 256 jobs. However, a large portion of workers don't use computers for their jobs. I couldn't find statistics for that, but whatever the real ratio is, it's lower than 256:1. It's safe to say your 300:1 ratio is well above average.

    --
    This space intentionally left blank.
  85. You forgot option #3. by gnarlyhotep · · Score: 1

    You're seriously understaffed, and it's normal.

  86. The answer to your question is yes... by rcgreenw · · Score: 1

    > Are we seriously understaffed, or is this normal?

    Yes, you are seriously understaffed, and yes, this is normal.

  87. Re:standard is supposed to be 185 to warrant on-si by Penguinisto · · Score: 1

    Like sibling, I don't envy you either. There's nothing worse than having to clean up after contractors, and then try and waste time teasing out WTF they did (because they obviously won't let you in on all of it, if for no other reason than to insure future contracts).

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
  88. Industry averages? by teflaime · · Score: 1

    I read a couple of years ago from somthing study that Usenix did that the industry average of servers per admin was 60ish for Unix and a little 80ish for Windows. In the shops I have worked in, the average of *nix servers to admin has usually been between 40 and 50. The average of Windows server per admin has been closer to 80-90. But that's because those shops simply had more Windows servers for nominal functions (DCs, wins servers, etc.) The numbers of users per server directly served on the *nix side was typically higher because you had fewer backend process type servers for the Unix side than you did for the Windows side.

  89. Crumpile by Crumpile · · Score: 1

    my personal experience as of late is this: our company, before downsizing, was around 100 employees in 3 locations. 2 exchange servers, multiple AD servers, FTP, etc. roughly 15 servers all windows. with that many desktops and that many servers i could handle it all. once you whip the servers into shape and get some desktop management going it's smooth sailing. a good IT admin with experience can handle quite a bit more than someone with say 3-4 yrs experience. i can handle 200 employees and 15 servers if they are all in the same location

  90. Tech support/Admins staffing levels by dlawson · · Score: 1

    I worked for a major Novell distributor in the early nineties. At the time, the SUGGESTION from Microsoft for help desk staffing was 1 tech per 50 - 100 users, depending on the level of automation that could be done (this was Win 3.1, including server). Novell recommended 1 CNA and 1 CNE per 30 - 50 servers, but that varied according to the applications running on the NW servers.

    The reason Novell bought USL (Unix Systems Labs) from AT&T was that 1 Unix admin could support as many as 50 - 75 servers, again depending on application type. UnixWare could run Oracle DB, and that meant there was a requirement for support admins for those "specialized" applications.

    In 1994, Novell spun the Caldera group (which started as a lightweight desktop replacement for Windows) off from Novell. At the time, I was still closely connected to Novell's Unix products group mostly through Kent Prows, who had fathered UnixWare through development. I was told at the time that Novell saw the Caldera project's success, and immediately ceased further development on desktop UnixWare, because "this Linux thing can do everything UnixWare can." That was from one of my other contacts at Novell.

    The reason for the digression was that Microsoft had popularized Windows through the CIO and IT departments as "minimum wage administration" (verbatim from an MS distribution rep) and Novell had the burden of showing that UnixWare had all of the advantages of Windows in ease of use, etc. However, they had to get over the fact that Corporate Types have an intrinsic desire to build an empire, and that meant plenty of foot soldiers, and hence the bigger Table of Organization meant more pay. They (CxO's) like that Windows takes more staff; more staff, more pay.

    BTW, at the time, Macs took 1 admin per 200 - 300 workstations, because of the better quality of software, and more necessity of reliable OS; because Apple had to support all of the Macs out there in home user land. I don't think that has changed significantly.

    So there you have it; because I sold Unix systems to all levels of the Federal Government (the CIA loved SPARC stations; but they ground them up when they were obsolete), I had to be pretty aware of these numbers.

    You can probably find out today's staffing levels from the respective OS manufacturers, search their sites for "enterprise staffing levels".

    And good luck with your quest.
    Dave Lawson

    --
    dot-sig.
  91. How much automation do you have? 1:120 for me. by wildhairzero · · Score: 1

    I have been doing this IT (for this discussion I define IT as server and end user support, not programing) thing for quite a while now (15+ years).

    My current gig will be seven years in a few months and what a roller coast it has been! After some cost exercising that was completed in Q1, there is only three of us in IT left and I was made the head cheese. We already ran a flat team where admins have to perform user support as well as their server stuff, so that did not change and in fact is the only way we have survived so far.

    Stats: Three IT to about 375 users with computers with about 75% being laptop users that DO travel. We are currently sitting on about 150 servers with 90% of those being VMware virtual machines. Other fun stuff includes two phone systems (on 10+ year old PBX and one 3Com "IP" based system), 60 BlackBerries, we also manage all aspects of the three cell phone carriers our company uses(oh, that means about 40+ cell phones we support), tons of printers, one AS/400, and much much more!

    How have we survived? Everything is in ActiveDirectory, making just about everything a virtual machine, picking IT tools that actually help (Track-IT, Rove's MobileAdmin, VMware VirtualCenter, TeamViewer), out sourced the after hours call support to a group that calls whoever is on-call and takes the initial notes, but no trouble shooting(fear not this call center is based in the USA!), keeping everyone involved in everything (cross training is GOOD for your team!)

    Having social skills! Everyone (including me) on the team is not a StarTrek/StarWars geek and can have a meaningful conversation with the end users. We work very hard to have a open communication channel with upper-managment and decision makers, so that they know when it is time to buy us new shiny toys so they do not have to add anyone to the pay-roll. You would be amazed at how quickly things go your way after you butter up the VP's admin assistant! "Oh I love what you have done to your hair today! Can you get Mr. Man to sign this purchase approval for me?"

    We are also very firm with our users, when they catch us in the hall on our way to one issue we say, "I need you to submit a ticket for what you are asking for and I will come back in a bit." Many do not like it, but we always spend the time to explain why it must be done. Only VP's get around the ticket requests, but hey you gotta scratch their back if you want their support when you need it.

  92. It Depends is the only answer here... by alta · · Score: 1

    The answers are going to vary wildly based on skill of the users, corporate environment and what they use the computers for. I've seen an insurance company that had 1 SA per 500 machines. They were all running a locked down version of XP, they were almost a kiosk. The users had 1, maybe 2 programs that they used, the insurance system and a mail client. It worked out well. Think blue collar behind a terminal.

    On the other hand, an office full of 'empowered' users each with admin rights on their own vista machine, the need for using many various programs and various duties, you may see as low as 50 to 1... Executives constantly on the cutting edge...

    --
    Do not meddle in the affairs of sysadmins, for they are subtle, and quick to anger.
  93. Highly variable equation by mrex · · Score: 1

    So much is dependent on the specific details of the computing environment. How many servers per day can your administrators give the requisite level of attention, each and every day?

    Clusters are easier to administer than stand-alone servers. Production servers can be easier to administer if you enjoy a proper development environment and change management processes, or more difficult than the development environment if you lack them. What sort of security risk profile must admins contend with? Are there other administrators? How well are your efforts coordinated? Are end users mucking about with the system? Do any require administrative access? How finicky are the applications being served? How robust and reliable is your organization's non-systems infrastructure? What's the hardware budget? The tolerance for process failures? What are the organization's expectations? How competent and responsive is the management? How homogenous is the infrastructure with respect to hardware, operating systems, and applications?

    Ever watch Star Trek? Define a "level 4" scan process for your servers with a focus on manually verifying it's complete functionality and the basic sort of checks and audits that can be performed with the system still operational, log review and process audits and such. How much time per server will it take an admin to complete each task? If an admin can't get this done for all of her servers in one day and still have time for lunch, her hands are too full.

  94. I've grappled with this very question for decades by mschuyler · · Score: 2, Interesting

    The statistics are poor. We're in a mixed-use environment with mostly Windows for users and mostly Unix variants for servers, including HP-UX, BSD, Solaris, and Linux. The best data I have ever been able to come up with is one tech per 100 units. I've never counted routers, switches, hubs, and wiring in this, though I think you could make a good case to add them in. Some of those are a lot more onerous to configure than a garden variety PC. One thing that helped us was a standard-build PC. Store all data on backed up dual servers so if a PC breaks, you can replace it with an 'identical' PC easily and quickly. We kinda screwed up originally because we were IP rich with eleven Class C networks, so we used IPs to identify PCs and hard coded them, and also used one Class C per building, which was a big waste. It was a bit of a challenge to move to DHCP allocation when our Class Cs began to fill up, but we managed to avoid a lot of subnetting for a couple of decades. You probably couldn't get away with that these days.

    --
    How about a moderation of -1 pedantic.
  95. Big ratio in my company... by WCMI92 · · Score: 1

    Where I work (a large printing/office products company in the Eastern US) we have TWO dedicated IT personnel.

    We have 800 employees, 600 of which we are directly responsible for supporting. That's it. One IT manager, one Systems Engineer (me).

    --
    Corporatism != Free Market
  96. Two by DesertNomad · · Score: 1

    Your boss, and offshore.

  97. No admins.. by EmagGeek · · Score: 1

    I work in an office with 400 people. There are 3 local admins, but we are not allowed to use them. Their sole job is to keep the phones and internet service going.

    If we have PC or Server issues, we have to call our company's global help desk in India to get a solution.

  98. It all depends on what you are managing by phoenix_rizzen · · Score: 1

    And how much of it is automated and remotely accessible.

    For example, our IT department has 15 people:
    1 Director
    1 Manager of Systems Admin
    1 Manager of App Devel
    1 WAN Specialist
    1 Programmer
    1 Helpdesk
    4 High School Techs (each looks after 2 or 3 schools)
    2 Elem School Techs (each looks after 15 schools)
    1 Electrician
    1 Hardware Tech
    1 Videoconferencing Tech

    We support over 5000 computers, over 100 servers, in about 70 buildings. 13,000 student accounts, and 1,600 staff accounts (at the district level, another ~1,600 at the school level).

    Between the WAN, programmer, and helpdesk, we remotely support 90% of the computers and all of the servers, since just about all of the servers are Linux or FreeBSD, and almost all of the computers are diskless Linux stations booting off the network. Pretty much everything is automated, and the individual computers have been reduced to appliances (no harddrive, no cd-rom, all onboard video/sound). When one breaks, we just swap in a new one, update the DHCP config, and they're off. Less than 5 minute turn around.

    We're actually looking at expanding the helpdesk and videoconf side of things, as the school techs are having less and less to do.

    If you can centralise the management, you can do with fewer staff. If you have to touch each individual workstation for updates or installs, then you will need more staff.

  99. for our company.. by joelmax · · Score: 1

    Our IT dept here where I work is 1 Systems analyst, 1 network admin, and our boss. That is for about 200 pc users across 27 locations, not big, but our ratio is what works for us, so we don't rock the boat... maybe if our users were a little more savvy we could run with 2 people, they tried that and it wasn't enough, but 4 would be too many. Really this is one of those hard to predict things that could be 1 for every 10 people, or 1 for every 50 people. In our case, we try to automate as much as possible, eliminating a lot of the mundane things that are just annoying to do... little things like that help keep everything balanced and maintain a reasonable tech to user ratio.

  100. I agree! by Archangel+Michael · · Score: 1

    A good SA can come in and make a lot of these stupid little problems go away, never to return.

    And often the old problems are replaced with a whole new batch, which might even be worse than the first set.

    Also, killing people is generally frowned upon around these parts.

    Yes, the BOFH is my hero.

    --
    Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  101. In an effort to respond before reading comments... by kainewynd2 · · Score: 1

    We had two admins for 160 client machines (labs included), 12 servers and fifty users.

    Feel free to apply your own math to that...

    --
    I just don't get... eh, ugh... never mind. This post wasn't worth the research I put into it.
  102. Really depends by falcon5768 · · Score: 1

    Its not a question of how many, but whats best. IF you have systems designed right, you could get away with a fraction of what many places have if the sites are localized enough. In education IT, our district has 7 techs (this is including the network manager) for roughly 1800 machines and 6000 users and realistically we could use twice the number of techs unless we got enough of a influx of money to completely redesign our districts IT structure to work better (its education so there is fat chance of that happening). The district next to ours has 2 for a little over 900. Then you can have 3-4 for 500 which i see often in small business.

    --

    "Slashdot, where telling the truth is overrated but lying is insightful."

  103. Title needs work by jackspenn · · Score: 1

    Shouldn't it be how many users/computers per administrator?

    --
    Respect the Constitution
  104. Lucky to have personal admin for every user ! by abdullah · · Score: 1

    We are a small business and every user is her own admin, so lucky to have a personal admin !

  105. I'm lucky... by Wyatt+Earp · · Score: 1

    30 users, 2.5 techs. One does half tech and travel scheduling. All Macs, all two years older or newer.

  106. These unix server numbers are crazy. by juuri · · Score: 1

    One per 70? Perhaps if you are running a ton of clone servers or heaven forbid working at an ISP handling boxes for customers.

    In the *real* world one normal admin per 35 or so is considered more normal for unix staff (with a senior admin for every 3-4 normal admins). While I have seen the numbers quoted by the parent they were very for generic servers in function and basically tons of copy (virtual) boxes. In addition if you are running a good deal of unix servers you more than likely have a lot of different functions spread out among clusters, one person responsible for all these apps as well as keeping the boxes well maintained, troubleshooting upgrades, etc... can be quite tiring. Unix boxes these days tend to do significantly more than they used to. On the flip side, managing unix boxes these days is quite easy thanks to ssh/cfengine/puppet other automation.

    When I first started doing unix for pay, mid 90s, we had one admin per two servers which was a mirror of the typical university environment where there were single admins for important machines and tons of lackeys for all the sun/hp/dec desktops. By the year 2000 this had grown to around 20 servers for each admin, with senior staff expected to be able to handle functions across any cluster. These days if it is a smaller company, there's one senior admin, who may or may not be the Network/IT manager and they typically handle 30-40 servers if there are a number of functions spread out. Of course having tons of similar boxes makes this number much higher. The most I've ever handled was 165 servers spread across two admins, three sites, four major applications, tons of clusters, including DB/Application/LB/Development/etc...

    Also, if you have 70 unix servers and only one admin, the point of failure for your organization is beyond catastrophic. That poor lil' admin guy is going to get many of the "what happens when a bus hits you" questions from 3rd parties/partners/other departments.

    --
    --- I do not moderate.
  107. One Admin For All by sendak · · Score: 1

    I'm the only IT person for a business with 130 users and 10 locations plus a second business with 25 employees and one location. I'm responsible for everything - desktops/laptop support, phones and blackberry, routers, servers (file shares, exchange, DCs, sql, citrix, term server, etc), and purchasing. I'm also on-call. Honestly, some days I'm overwhelmed and others are quiet. I have an IT consulting group on retainer for when I need advise or an extra person for a day. I also have a very supportive non-IT manager.

  108. no 'benchmark' by itzdandy · · Score: 1

    The truth is that there is no benchmark for this. I am a consultant and tend to take a sysadmin role for clients.

    If you use Active Directory and store user files on the network then you can do stock images for each model of machine and a broken unit is a 20minute re-image (or swap fresh machine in from the pool) and your up and going, documents and all. This is where a directory services' up-front costs become justified.

    With Active Directory I can manage machines and users very efficiently, keep user's files safe with shadow copies, backups, etc, and deploy software and printers to users easily. For linux to Active directory look at likeise-open or centrify for single sign on with the latery able to do group policy on linux machines.

    I have 4 techs and myself. between the 5 of us we handle about 2500 or so users across our clients. Our clients that have been with us for a year or two are all have some sort of AD setup and have a much lower computer expense than before. oddly enough, newer clients account for larger expenses because they havent standardized their computers ad require more trips to their site and more billable hours.

    I would imagine that if I had only established users, with computers on AD then my crew could handle 3000-3500 users without much overtime. If we did no managed computers then I think that 250 users per tech would be pushing it.

    If you just compare those numbers, 600 vs 250 you can pretty easily see the cost savings for a managed network, either through AD, network, or other LDAP. a 1200 user network could be reasonably run by 2 IT guys vs really needing 4 or 5 to do the same job otherwise. let be conservative and say 4 guys at $40,000 each vs 2 guys at $50,000 (higher skills for 2 techs vs 4) and you see a $60,000 gap, which is much more than the CALS and servers needed for 1200 users. 1200 users is still in the 2 ADDS servers arena. lets say $3500 per licensed server and $35 per CAL and you save money on year 1, next 4 years are free!.

    Right now it is kind of handy because my guys work their ~40 hours doing stuff on managed networks and pull 'overtime' going to customers sites or doing old computer triage and repair and get paid part of the service fee.

    If you are at 600+ users per tech, then you really should be on some sort of directory service like AD. If you are not, I suspect you are spending a lot of your labor dollars spinning tires and not helping clients/users very well. That equals more compaints, less praise, and likely a lack of raise or bonus.

    1. Re:no 'benchmark' by uglyduckling · · Score: 1

      Does AD have any facility for client machines to push signed device drivers onto the server for backup? It would seem to me that with Microsoft putting so much emphasis on approved, signed drivers, it would be a real boon because then you wouldn't need images per machine, and could have an automated system for taking a stock image and adding the required device drivers to re-image a machine.

  109. As many as it takes. by Wdomburg · · Score: 1

    The reason there are no good rules of thumbs is because environments and applications vary widely. Are the applications canned or custom? Are we supporting general services like file sharing or printing? If so, are we talking about printing documents here and there, high volume legal or medical printing, floor plans on a giant honking plotter, pre-press ad copy? Are the files the usual office flotsam and jetsam, high value CAD files that demand rigorous snapshots and backups, raw video files that require high speed workstation storage? Are there natural downtime windows to perform maintenance? Are there internal or external SLAs to meet? Are users given administration privileges, or is everything centrally managed? What mobile devices are in use? Are networking needs managed in house or contracted? Is there need for VPN access? Is mail storage done in-house or outsources? If so, what's the spam and virus filtering? Are there quotas? Synchronization with mobile platforms? Integration with an instant messaging platform? What about hardware? Does the hardware cycle match the warranty cycle, or does the company expect the IT staff to do their own maintenance?

    In other words, the correct ration of admins to users or computers is "as many it takes".

  110. One coolie per rickshaw? by grikdog · · Score: 1

    Seriously. What does your experience of management decisions teach you about probables like that? Be glad you have a job, and never, ever, under any circumstances, dare to even THINK about unionizing.

    But if you do, I recommend the Teamsters.

    --
    ``Tension, apprehension & dissension have begun!'' - Duffy Wyg&, in Alfred Bester's _The Demolished Man_
  111. Define 'Admins' by yhamade · · Score: 1

    Since your question was rather vague, I've got a few questions for you:
    - Let's start with your definition of Admin, Technician, or "Support Tech".
    - What responsibilities do they have within the environmnet?
    - Are they simply Desktop/End User Support, or do their roles expand beyond that?
    - Are you lumping all support people into this same category?

    Assuming you're talking about strictly Deskop / End User Support (aka. the guys who show up at your desk to fix a problem), the answer depends alot on their skill sets, the complexity of your environment, their responsibilities, level of automation, and a whole series of factors. The Help Desk Institute (http://thinkhdi.com) has a lot of information that can help. Given that you are a Windows PC shop, Microsoft has a bunch of analysis tools that can help you detirmine the complexity of the environment and suggest ways to optimize it. (Google: Microsoft Infrastructure Optimization model (IOI)).

    Assuming you're talking about an entire systems support organization, I've seen IT consume up to 60% of a company's total staff (including developers, project managers, and systems analysts). Within that, I've seen up to 30% of those people to be "systems support" (Service Desk, Desktop Support, Data Center Operations, Telcom, Networking, Windows/Unix Server Support, DBAs, and various Architecture and Engineering teams).

    Since you're probably looking for a swag, here's what I'd say:
    For 900 seats and 9-5 operations...
    3 persons answering phones
    5 persons visiting desks
    3 persons managing servers/storage/mail (add 2 more for networking/telcom)
    3 persons managing patching and making everyone else's jobs easier (aka, engineering/projects/packaging/scripting/imaging/etc)

    If you want to know where my math comes from, just ask. But it breaks down on a few assumptions of having a diverse team with varying degrees of experience and skill sets. Of course, if you have a handfull of rockstars, the numbers change, but in the end, the salaries will probably add up to being the same.

  112. the power of NO by tempest69 · · Score: 1
    I've run a crew to take care of a couple thousand boxes. For four years. When I started, we has 2 crews (17 people) both working overtime, on a horrible mix of hardware, with a bunch of in house applications. And quite a few poor decisions by my predecessor left us with a static ip address nightmare. We had 5 applications installs a week to perform on subsets of the machines.

    Anyway it took a whole bunch of work, we inventoried all the hardware, and made groups of 20 that were identical. Then we said NO to any application that broke the current applications in the slightest. We said no when they wanted to move to the area by the window, where all the misfit machines sat on the desks. (All the rare parts in one unused pod).. It became required to use it when there was no other place to use.. By that point we were down to 1 crew of 7, who were having problems trying to look busy enough not to be downsized.
    After getting in new boxes with matching hardware, we were down to four people who were less busy than the security guards. One of the crew built an impressive counterstrike map of the building. Our boss got awesome at quake. I practiced coding, and built scripts to inventory all of the software /hardware remotely, (the manual busy work she (our boss) gave our crew too often).

    Anyway for 900 boxes 3 could be plenty, or horribly understaffed.
    cheers

    1. Re:the power of NO by tempest69 · · Score: 1

      oops a b not a br big diff... must learn to click preview

  113. Unix desktops. Oh, the happy memories.... by BenEnglishAtHome · · Score: 3, Interesting

    I've yet to see a serious roll out of Unix desktops...

    I have. We had two SAs who handled everything on that rollout. I was one of the two. We installed and maintained all software (that was written and pushed to a central server by a different staff). We installed and maintained all equipment, both field and server room. The standard setup was each group was 10 to 15 people. One secretary used a desktop and everybody else had a laptop. All laptop users got an individual laser printer for home use. Each group had two impact printers for forms and one networked laser. Each group connected to their own database server. There were three additional servers that controlled other functions. Every single machine ran SCO OSR 3-point-something. Hardware was IBM for everything.

    Us 2 SAs did everything. It didn't matter how small or large the problem, from replacing a USB-to-ethernet dongle to rebuidling a server (I could fully build a server, pulling spare hardware, imaging from tape, and restoring all databases from online backup in under two hours. We had that shit wired, I tell ya!) to taking calls from people who didn't know how to turn off the reveal codes in WordPerfect, we did it all.

    Everything that could be scripted was. Our morning checklists and reports took a half hour, tops. On a good day, that was all we had to do all day. On the worst of days, we might work hard. But bad days were rare. We could take our vacations and know that no matter what shit hit the fan, the one of us who was on-site could handle it. We had the wonderful luxury of being able to walk around the user groups and ask people if they needed anything. They almost never did.

    Our total user base was about 300 people. So I'd say if things are designed right, 2 people can handle 300 easily.

    Of course, there were 25 or so admins and desktop people on the Windows side of the house, taking care of about 1200 users. They ran around looking like they were doing important stuff all the time. And I guess they were. Their stuff broke so much, they were constantly being rewarded for rescuing some project from the jaws of disaster or fixing some irritating problem that had plagued their users for years. Those poor sods hid in their cubicles most of the time; they didn't dare walk among the user population for fear of someone throwing something at them or, at minimum, being constantly harrassed by users pleading "Could you take a quick look at this?"

    Our users just did their jobs, working on hardware and software that just worked, reliable as gravity (well, nearly) with no drama at all.

    You can see what's coming, can't you?

    The higher-ups started wondering aloud why those two SAs over in the corner never seemed to be running around in a panic fixing things. "Don't they have any work to do?" The higher-up attitude toward the Windows guys was completely different. Hell, I remember one of them getting an award for recovering data from a crashed server. They actually rewarded the guy with a certificate and a little ceremony because he had backups, something we took for granted in our little world.

    Obviously, it couldn't last. All our apps got re-written to Windows. All the Unix stuff got ashcanned. Our user population got folded in with everyone else and forced to use the standard Windows-image machines.

    And we now run around putting out fires with no time to catch our breath.

    Man, those were the days. 1 to 150 was a breeze. Nowadays, deskside support is at about the same ratio and we're always on the verge of burnout, always working harder, always falling a little further behind. As much as I love my work (and I do, dearly, love helping alleviate the pain of a user who can't get their work done until I fix something), I'm *seriously* looking forward to retirement.

  114. At my place... by kannibul · · Score: 1

    I'm the only "IT" guy, we have 5 others (1 manager/programmer, the others programmers) that are upgrading/developing internal applications. I take care of all the support issues (except for those internally developed apps). We've recently hired a sort of level-1 person, that is here part time. Job demand is such that we can just barely jusify having the part-timer - as this person's position has to be "billed out" to the other departments. Myself, I'm not billable for most of them. Strange, I know. Overall, we have around 200 users, according to active director. We have around 20 servers. Computers, we have around 300 or so. Why, you might ask? We have computer labs that the public can use...that we have to maintain. By myself, I get more and mroe behind, projects get delayed, ideas are never fleshed out. With the part-timer, I get enough breathing room that I can do more, even though I have to walk this more technical person through things...at least they get it, where our users don't.

  115. The answer is obvious by waa · · Score: 1

    42

    --
    Windows is not the answer.
    Windows is the question.
    The answer is "NO."
  116. Staffing at my last two companies by zerofoo · · Score: 1

    I was the network manager for a bank with 17 branches, and 3 office locations, about 200 or so employees, and about 40 servers (production, training, and test).

    Total IT staff at the bank: 1 VP of network services (I reported to him), 1 network services manager (me), 2 help-desk/branch support guys (reported to me), 1 DBA, 1 core banking application support/administrator, 1 IT dept secretary (actually VP's secretary, but she helped us all out), and 2 operators to run the check processing/statement printing systems.

    Now I am the IT director for a small private school. We have one school and one office/tutoring center, about 70 employees and 128 students, 20 servers, and a bit over 200 laptops and desktops, as well as other stuff (routers, switches, firewalls, remote access, VOIP telephones, printers, copiers, IP cameras, AV gear....etc)

    Total IT staff at the school: 1 IT director, and two technology teachers. The teachers are in the classroom most of the day, but they help students and staff with the "help-desk" stuff, and escalate severe problems to me. Administrators come directly to me for support.

    -ted

  117. Sounds like a college where I worked by smchris · · Score: 1

    I can remember one of Support resigning in ecstacy. "I'll be in charge of 13 workstations! THIRTEEN!!!!"

    Not sure how that worked out but I think we can safely say that the range is considerable.

  118. For an ISP with just under a million users by nick_urbanik · · Score: 1
    We have about 600 servers built into very diverse and complex systems, mostly each a few machines clustered with LVS. We have four people with rotating on-call support duty, but we all mostly develop new code rather than spend most of our time supporting the ISP. All is built with free software. The most important thing is that we have an excellent configuration management system (built in house), which as far as I can see is better (for us) than puppet. All system and application configuration is totally automated using that system, allowing:
    • Rebuilding a machine after a failed disk replacement (or replacement with a spare) takes 10 minutes to kickstart, 10 minutes to run the configuration manager, back in service.
    • We only backup data; backup is simple and automated, requires few resources
    • Configuration of members of a cluster is reliably the way it should be.
    • Firewalls are established automatically only allowing access to clients, and communication between master and slave servers (MySQL, OpenLDAP).
    • Master-slave relationships are automatically created, and need only be stated implicitly.
    • Monitoring and alarming is implemented automatically.

    While this is a different situation from the article, it indicates that the number of people required is to a large extent determined by the degree of automation and the discipline of rigorously implementing that automation. Without configuration management, life is much harder.

  119. Small County government by trolman · · Score: 1

    County government: 300 users. Two IT Specialists and myself. Mix of Unix, Linux, but mostly MS.

  120. As in many things, "it depends" by CAIMLAS · · Score: 1

    I've never done IT in an "IT shop", whatever that means, exactly. But my experience is 1) in a larger national medical service provider, and 2) a small regional/rural hospital.

    1) The national provider had approximately 250 Linux "cache" servers located remotely, about 3,000 XP workstations (with many more than 3,000 users), and approximately 25 national campus servers. The support was tiered; I was on 3rd tier with 2 others, with approximately 15 people on 1st tier and 5 on 2nd tier. I spent about half my day on support calls or fixing workstation/server problems (I was the lowest-level 3rd tier) and the rest were spent doing equipment deployments and requisitioning. In addition, there were 2 guys doing network/host security, someone who did all the Windowsy admin work, two network (Cisco) guys, a user requisition gal, and two database guys. (There were also about 8 or so guys doing the development for internal software packages.)

    2) I was, essentially, the sole supporter of workstations and servers (there were two other functional staff, one doing biomed stuff and printers, the other doing support for the large monolithic terminal app everyone used.) There were 250 workstations and about a dozen servers. The servers were not maintained well in any sense of the imagination - they were spread out throughout the facility, and were a real headache. The workstations were mostly OEM XP installs with crapware installed, et cetera. Realistically, there should have been another person in my role (minimum), and we should have worked towards a better arrangement than what we had, as there simply was not enough time for me to do it on my own after triage.

    So, basically: it depends. I'd say the reasonable number of support people decreases as the organization grows beyond a certain point; likewise, the number of justifiable support people increases as the organization grows from 1 up until a certain point.

    A well-run shop is not going to need as many people as a poorly run shop. But, the size of the shop often dictates whether there are enough competent people to make it run smoothly, so it's a bit of a catch-22.

    Case in point... I did support on a small Mac based network for a while. It was just me, and 9 users with some fairly specific needs. They were just at the point where they actually needed someone at all, but it was enough to be a FT role. After a couple months, i'd gotten rid of most of their issues and managed to get things running smoothly and trouble-free. My reward was the closing of my position.

    --
    ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
  121. Depends by scum-o · · Score: 1

    I ran a whole IT department by myself with hundreds of servers. Life was great. I used tools that I understood, was confortable with, were tested over time. Everything ran smoothly. Then new management came in, changed everything, now it takes > 4 admins for twice the number of servers, and we're always behind with tickets and our support is worse. So my answer is "it depends".

  122. Use Project Athena Worksheet by SteveEd · · Score: 1

    I've used a tool for a decade now that I really like. It was developed by IBM and MIT to determine staffing levels. Basically, it asks you to go through your entire organizational and IT structure to answer questions, weighs these and provides an answer about how many FTEs are required. It does not break this down into programmers vs. trainers vs. help desk. The project was call Project Athena. You can find the write-up on DocStock or InternetArchive (I don't recall which). It was a tool used by the State of Michigan as little as four years ago but has disappear from their sites. Examples of the types of questions follow: 1. Number of computers (workstations, not servers) in your organization. This is divided by 500 to give a ratio. 2. Number of server-based major applications in terms of FTE requirements. For instance, you have a heavy email system that requires someone taking care of it half-time. This would contribute .5 FTE to the count. 3. Number of user applications, for example 500 Microsoft office, 10 Visual Studio Enterprise. These are added up and appropriate ratios are applied. 4. Intensity of use, # of employees using their system between 50% and 100% of the day get 1 point, occassional users get .25 points. Again these are added up and ratios are applied. 5. Other responsibilities, phones, copy machines, etc. I monkey around with the figures trying to keep them meaningful and usually end up getting what I need (except possibly in my current job) in terms of human resources. The system is quite comprehensive and flexible. Even though it was designed for educational institutions, I believe that it's generic enough to apply to business.

  123. It depends. by jotaeleemeese · · Score: 1

    I managed DNS service for a region (many countries), It was only 8 machines. It was thousands of users (8000, perhaps more), there were 3 of us (not exclusively doing this, but I mention it this way for contrasting purposes).

    In another job I had only 8 users, and 16 machines, but the software was highly specialized, that was more time consuming than the example above.

    So are you understaffed? You are the only one that has a chance at knowing this.

    Are you constantly staying late and working out of hours? Then you are understaffed, disorganized or both It is that simple really.

    I have been in shops where they expected exponential growth could be managed without extra personnel, you should learn to identify those situation and plan accordingly (either reduce growth if you can't hire more people, or hire more people).

    --
    IANAL but write like a drunk one.
  124. It depends by ResidentSourcerer · · Score: 1

    If everyone has the same desktop, keeps their files on a central server, and you can rebuild the desktop with a single command, then the correct answer is likely "one"

    Reality strikes.

    Not everyone will have the same desktop. Only a very few copies of AccPac accounting need to be installed.

    Someone will need photoshop. Or InDesign. Someone will need Autocad.

    If you can take the time to automate every install. Every computer is associated with a profile to install the right stuff. Then life is easy.

    I've had 4 sysadmin jobs.

    Space Physics -- 10 NeXTs, 2 RS6000, Stardent Titan, Dec Ultrix, Myrias SPS 3, couple PC's. Easy.

    Math Dept -- 3 versions of SGI IRIX , 2 versions of Solaris, 2 dists of Linux, HP HPUX, RS 6000, 5 versions of Microsoft. 250 machines total. That kept me hopping. About half my time was spent on the 30 machiens that ran some form of windows.

    YottaYotta. All linux. Had time to make automated reinstall systems for the developers to crash regularly. Easy.

    High School. FreeBSD servers, windows 2000 clients. 60 machines total. Windows took up 90% of my time.

    Generally:

    Managing a hoard of anything isn't much harder than managing three of them.

    If you have an OS where applications can be completely divorced from the OS (*ix) and can be run from a network drive, then almost all of your individual workstation customization is trivial. (symlink to the application for light weight stuff -- rsync nightly for heavy weight apps)

    If you have an OS that is smart enough to recognize hardware changes, and not bork on you when a disk image is moved to a slightly different hardware platform (Linux, *BSD) then you are golden. You don't have to manage the combinatoric explosion of N different motherboards combined with M different desktops.

    If you have a setup where users cannot install executable software, the crisis count goes way down.

    In short: Managing a hoard of machines is easy if you don't have windows.

    --
    Third Career: Tree Farmer Second Career: Computer Geek First Career: Teacher, Outdoor Instructor, Photographer.
  125. Management Decisions by JWSmythe · · Score: 1

        This is really a management decision.

        How many admins you have should be weighed by the department manager. That is decided by the workload. How long does it take to get issues resolved?

        I ran a shop with about 150 Linux servers, and about 2 dozen Windows machines. It took 2 to 3 people to do the job effectively. The Linux machines ran themselves very well. The Windows machines did ok, but required manual intervention on a fairly regular basis. If you're not geared up for automatic work, then your numbers would go up.

        Do tasks get completed in a timely fashion? Then the staff load is correct. If the work queue is too long, then you need more people. "too long" is decided by the business needs. Is it acceptable for a workstation to be down for 10 minutes waiting for a tech to get to it? Then you're fine. If it's acceptable for a workstation to be down for days (the staff can move to another one), then you're still fine. If the problems are not resolved fast enough (desk workers not able to accomplish their tasks on a regular basis due to IT reasons), then you have a problem.

        If the staff works 40 hours a week, and all goals are being accomplished, then they are doing the expected workload. Management should have already accounted for fluctuations in the workload though. If you had 30 IT guys for 40 desktops, and the IT guys sit around with nothing to do all day, then obviously you're overstaffed.

        If you think that the workload is too high for the IT staff to accomplish, that's something to take up with your manager.

    --
    Serious? Seriousness is well above my pay grade.
  126. Worst I've seen.... by BigBrownChunx · · Score: 1

    I used to be the only "IT guy" at a workplace of 110 Windows and OSX machines. If there was anything IT related ("build us a website","make this expensive new Windows-only printer we just bought work with that Linux thing") it fell upon me to do it. Of course, I was fired because I started to say "no" to their technically impossible requests leaving..... no one behind to do anything. Oddly enough, the company still hasn't got a new "IT guy" in after a year... but they did get in a 3rd party to replace their 14 year old NT4 server box that was sitting on the floor under some guy's desk. 110 users-to-0 admins is the same as infinity-to-one right?

  127. 50:1 by fuzzywig · · Score: 1

    50 users (about 20 of which are on the road) 10 windows servers (overprovisioned) 1 admin (me)

  128. As with most things in life, it depends. by Geminii · · Score: 1

    You will generally need fewer IT staff per hundred users if:

    - You have a large organisation (several thousand staff) and can use economies of scale.
    - You have a homogeneous digital corporate environment.
    - Your business does not change much from year to year.
    - Your business is largely non-IT based; miners and dock workers generate less IT demand than office workers and engineers.
    - Your IT infrastructure has been built up slowly and thoughtfully, with consideration given to interoperability, remote administration, and software automation and maintenance.
    - Your IT department is allowed to devote resources towards improvement of service.
    - Your IT department has extensive input on incoming upgrades, speccing and sourcing, and other uses of the IT budget.
    - The IT staff is paid well and provided with an attractive working environment, leading to lower turnover and greater average ability/knowledge per IT person.
    - The IT staff don't mind cross-training and providing a degree of flexibility and coverage for each other, which is a lot easier to make stick if people actually like working for your IT department.
    - You have procedures in place for both reducing instances of and minimising effects of things like bad software rollouts, new interface implementations, and so forth.
    - You have methods in place for allowing a sliding set of task assignments, so that if something big does unexpectedly crop up, people can be smoothly assigned to it in an actually effective way without their normal duties falling by the wayside, and it can be taken care of much more rapidly. You also have procedures for rapidly acquiring additional emergency IT staff who won't need three months' training to get up to speed.

    So, yeah. There's a bunch of factors involved. A ten-person IT team might be needed for a fifty-person bleeding-edge programming shop built out of spit and Steve Jobs' old turtlenecks, but an identical ten-person team might be able to hold down a fifty-thousand-employee megacorp where the infrastructure is a locked-down 500-person HQ and two hundred sites specialising in physical labor and hosting a single indestructible greenscreen terminal each because 90% of their paperwork consists of the boss's clipboard and a work schedule stapled to the break room wall.

  129. technical merit versus religion by SgtChaireBourne · · Score: 1

    the management demanding it because that's what they want to beleive that everyone else uses

    There fixed that for you. Either way, fixed or unfixed, the statement points out the problem: Windows is there because the software is not selected or even evaluated on technical merit.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
    1. Re:technical merit versus religion by AK+Marc · · Score: 1

      You didn't fix shit. You changed my statement and accredited it to me. That makes you a liar, and wrong, and is unrelated to my point. Not to mention in direct violation of the truth. Windows is used more than anything else. Period. To whine about that and "fixed" something by taking a true statement and replacing it with a lie and lying to attribute it to someone else isn't a service.