Identity Management, Tools, Cerebro Overview
What information is available in Cerebro and how do I interpret it?
Cerebro can be accessed here. Any campus network or VPN can access Cerebro; it is in the fully closed firewall group.
- This section includes the user's name and UIN.
- You should not provide someone their UIN - they can use the Find your UIN tool.
- If they have issues with the form, you can provide their UIN after verifying some of their info (have them tell you their NetID, department/major, etc.)
- Illinois Email Delivery - this field shows where the relays are set to send their mail.
- @mx.uillinois.edu goes to their Exchange inbox, and @g.illinois.edu goes to their Google Apps account.
- This can also be set to a personal email. If they have an Exchange inbox and want to send their mail to a personal address or Google Apps account, they also need to set up a forwarding rule in Exchange. See Office 365, Email, Exchange, Forwarding Exchange Email to Another Account.
- This field indicates what types the account has. Every person should have person and phone.
- They may also have student, staff, extra help, degree, etc. This determines several things, such as if their account is enabled and their access to certain applications/services.
- Similar to type, this provides more information on students and affiliates. It shows terms for which students are/have been registered, along with degree recipient dates. Staff roles are coming soon.
Password Recovery Options
- Shows what password recovery options they have set up for self-service password recovery. They can use them at the NetID Center. The information is truncated for privacy.
Enterprise ID Assignments
- Shows the user's Enterprise ID (EID) and all NetIDs they have across all 3 campuses. For instructions on merging multiple NetIDs and/or EIDs, see NetID Change, Merging multiple NetIDs .
Skype for Business
- This section will show if they have a Skype for Business account, what their number is, and what their NCOS dialing policy is.
- For more information, see the following:
Google Apps @ Illinois
- Shows whether the user is enabled to use O365 apps. This does NOT indicate if they have an Exchange account (see below).
U of I Box
Active Directory (AD)
- Account status
- Enabled or disabled. If they are disabled, they do not have a current affiliation with the university. This is tied to type (i.e. student, staff, special, allied all make an account enabled).
- Password locked
- Their password is temporarily locked due to too many incorrect attempts. Can be unlocked using the AD Tools.
- Sometimes a device can hold onto an old/bad password and cause recurring lockouts. Ensure their password is up-to-date in all of their devices and programs to avoid this.
- If you can't solve it, contact the Help Desk for help identifying the device causing the lockout. See [Link for document 48098 is unavailable at this time.] for more information.
- Password last set
- Helpful for making sure that their password is not expired.
- Duo enrolled
- Indicates if they are enrolled in 2-factor authentication
Exchange Online (Office 365)
- If this section is not blank, the user has an Exchange account
- Do not trust the following fields - they are not known to be accurate:
- When created
- Last logon
- Last logoff
- It also shows any inbox rules they have set up, which can be helpful for troubleshooting
- They may have certain things sent to a folder or deleted, so can be useful to see where items might end up.