I am the kind of person that thinks that a person can never know too much. Clearly I am not the person who should be in charge of securing the enterprise! I was reminded of this in a great slideshow which says 87% of organizations think that their employees have too much access to information…
I recently watched a demonstration of Forefront Identity Manager’s implementation of dynamic security groups, a feature that GroupID Automate has had since its inception. The FIM query designer appeared to do a pretty good job and I was beginning to see where it would fit into the marketplace when at the 45 minute mark, the speaker…
Years ago, I heard a stat that the average user gets provisioned into 16 directories when hired and deprovisioned from only 10 directories when leaving. For the math challenged, that leaves the ex-user active in 6 directories. Which is, of course, a problem. Today’s IT infrastructures are big and complex and there are lots of nooks…
Forefront Identity Manager (FIM) has been getting a lot of interest based on codeless sync and codeless provisioning. Carol Wapshere talks a bit about how it’s not all it’s cracked up to be on her excellent blog, Miss MIIS. She discusses a few key points about the limitations of FIM’s codeless synchronization and points out…
Do you ever look at your Global Address List (GAL) and say, “what is the point of that group? Is anyone even using it?” Chances are if the IT department is wondering that, then end users are wondering the same thing. And if that is happening, chances are you have a lot of unused distribution…
The best way to show the power of GroupID’s Active Directory provisioning is to demonstrate it in action. When at trade shows, we’ve found an interesting way to show the ease and power of Active Directory provisioning to attendees by using their own identity data. When they swipe their badge, we provision them as Active…
This use case is a bit different…you are an Exchange administrator who wants to manage your Exchange distribution lists by spreadsheets. You want to have end users give you a spreadsheet of members they want in the Active Directory group and you are going to manage it. You could use ADUC if you are a…
The directory and database infrastructure in most organizations is a tangled web of identity information. According to Microsoft, the average user needs to be provisioned into 16 directories or databases upon hire. A disturbing side-note is that same user is de-provisioned from only 10 directories or databases upon termination. But what I’m more interested in…
I had a friend who didn’t believe that anything was worth owning unless he had fixed it himself or somehow customized it. He drove an International Harvester Scout (still one of my favorite vehicles) because it could be repaired with duct tape, a screw driver, a crescent wrench and whatever liquid happened to be in our…
Group Policy Objects (GPO) are not just for OUs any more. There are not a ton of GPOs that are better off applying exclusively to Active Directory groups but there are a few. The main use of GPOs filtered to Active Directory security groups is to create exceptions to group policy but there are a few…