Identity Management, Tools, Cerebro Overview

Cerebro can be accessed here. Any campus network or VPN can access Cerebro; it is in the fully closed firewall group.

General Information

• This section includes the user's name and UIN.
• You should not provide someone their UIN - they can use the Find your UIN tool.
  •  If they have issues with the form, you can provide their UIN after verifying some of their info (have them tell you their NetID, department/major, etc.)

Central Registry

• Illinois Email Delivery - this field shows where the relays are set to send their mail.
• @mx.uillinois.edu goes to their Exchange inbox, and @g.illinois.edu goes to their Google Apps account. 
• This can also be set to a personal email. If they have an Exchange inbox and want to send their mail to a personal address or Google Apps account, they also need to set up a forwarding rule in Exchange. See Office 365, Email, Exchange, Forwarding Exchange Email to Another Account.
• Type
  • This field indicates what types the account has. Every person should have person and phone.
  • They may also have student, staff, extra help, degree, etc. This determines several things, such as if their account is enabled and their access to certain applications/services.
  • Students generally gain student type after they register for classes, and faculty/staff after they complete NewHire through HR.
  • See Identity Management, Affiliations, Student NetIDs and Roles for more details on students.
• Role
  • Similar to type, this provides more information on students and affiliates. It shows terms for which students are/have been registered, along with degree recipient dates. Staff roles are coming soon.

Password Recovery Options

• Shows what password recovery options they have set up for self-service password recovery. They can use them at the NetID Center. The information is truncated for privacy.

Enterprise ID Assignments

• Shows the user's Enterprise ID (EID) and all NetIDs they have across all 3 campuses. For instructions on merging multiple NetIDs and/or EIDs, see NetID Change, Merging multiple NetIDs . 

Skype for Business

• This section will show if they have a Skype for Business account, what their number is, and what their NCOS dialing policy is. 
• For more information, see the following:
  • Skype for Business, Changes to a Phone Number (Creation, Calling Policy, Service Type)
  • Skype for Business, Dialing Terms of Service and NCOS Codes

Google Apps @ Illinois

• This section shows whether the user has enabled their Google Apps account. If they would like to use Google Apps but are not enabled, they should visit the Cloud Dashboard.
• More information on the service along with eligibility rules is available here: Cloud, Cloud-based storage solutions for campus . 

Office 365

• Shows whether the user is enabled to use O365 apps. This does NOT indicate if they have an Exchange account (see below).

U of I Box

• This section shows if the user has a Box account. If they are getting an error trying to log in, they probably need to go to the Cloud Dashboard to turn it on.
• Please note: U of I Box, Eligibility for U of I Box Accounts

Active Directory (AD)

• Account status
  • Enabled or disabled. If they are disabled, they do not have a current affiliation with the university. This is tied to type (i.e. student, staff, special, allied all make an account enabled).
• Password locked
• Their password is temporarily locked due to too many incorrect attempts. Can be unlocked using the AD Tools.
• Sometimes a device can hold onto an old/bad password and cause recurring lockouts. Ensure their password is up-to-date in all of their devices and programs to avoid this. 
• If you can't solve it, contact the Help Desk for help identifying the device causing the lockout. See [Link for document 48098 is unavailable at this time.] for more information.
• Password last set
• Helpful for making sure that their password is not expired. 
• Duo enrolled
• Indicates if they are enrolled in 2-factor authentication

Exchange Online (Office 365)

• If this section is not blank, the user has an Exchange account
• Do not trust the following fields - they are not known to be accurate:
• When created
• Last logon
• Last logoff
• It also shows any inbox rules they have set up, which can be helpful for troubleshooting
  • They may have certain things sent to a folder or deleted, so can be useful to see where items might end up.