project database

Common Pitfalls in Active Directory Self-Service

I presented a webinar today on the common pitfalls in Active Directory self service.  I would link to a recording but as usual I forgot to hit that red record button at the beginning.  Luckily, Imanami has a blog so that we can save the ideas for posterity. First off, why do you want to offer…

project database

Manage Active Directory User Accounts

To manage Active Directory user accounts; that’s quite a statement.  It evokes an image of constantly working on a user account, ensuring its accuracy, checking on its well being, and probably calling the user herself every once in a while to see how life is going.  It is also one of the phrases that brings…

Computer Objects in Active Directory Security Groups

In Active Directory, a computer object is a security principal. This means that just as with a user, you can give permissions for resources and assign security group memberships to the computer. Applying permissions to Active Directory groups, more specifically, Active Directory security groups instead of OUs is a generally accepted best practice. For user…

project database

Computer Objects in AD Security Groups

A computer object is a security principal. This means that just as with a user, you can give permissions for resources and assign security group memberships to the computer.  Applying permissions to security groups instead of OUs is a generally accepted best practice.  For user objects, you can delegate part of this and automate most…

project database

Case of Active Directory Groups Multiple Owners

Managing Active Directory is a repetitive and routine task yet can be overwhelming. Group management is performed in Active Directory as a means of simplifying administration and achieving flexibility. Keeping it all orderly and secure is a challenge fraught with nuance and details that are time-consuming without the correct tools. Table Of Contents Group Owners…

project database

Mail Enable an Active Directory Security Group or Not?

In a recent conversation with a GroupID customer, we were made aware that they don’t allow mail-enabled Active Directory security groups. Another customer in the same meeting wished to disable the ability of mail-enabling security groups altogether. So, it left us wondering why IT Administrators are hesitant to mail enabling security groups? Before digging down…

project database

The 3 Most Common Dynamic Active Directory Groups

Maintaining the accuracy of all Active Directory groups is important but as George Orwell may have said (and I’m paraphrasing here), “All Active Directory groups are equal, but some Active Directory groups are more equal than others.”  I say this because some Active Directory groups have to be accurate.  And because some are easier to keep…

project database

Can Active Directory be Put in the Cloud?

Imanami was recently quoted in Windows IT Pro on Active Directory’s 10th anniversary.  Part of that discussion was whether Active Directory could be put in the cloud. “That’s tough,” Haaverson says. “AD is protected with a vengeance. Why would you want to push it to the cloud? What do you do if the Internet goes…

project database

GAL Synchronization Between Forests

In today’s M&A-heavy environment, GAL synchronization between two or more forests is becoming more and more important.  IT departments are regularly called upon to integrate two organizations’ global address lists on the first day that the merger is complete, expecting employees to be able to see the new organizations as one even if the backend…