project database

Active Directory Group Membership Report

One of the beautiful things about our modern world is the availability of information.  If you ask, you are bound to find it.  One of my responsibilities is finding out what people are asking about Active Directory & Exchange.  You would think it would be big picture items: “Can Active Directory be put in the…

project database

PowerShell and Active Directory

In each of my YouTube chalk-talks where I have created dynamic Active Directory groups, I paused to admire the section where GroupID provides the specific PowerShell command that would create that group in Active Directory.  It is an excellent feature that allows our customers to script some of these commands into existing processes.  The word…

project database

How to Make Active Directory Groups Dynamic Using Criteria from External Database

Think about all of the data that you have in your infrastructure.  I’d bet that most of it isn’t in Active Directory.  And yet, you would still like to use it for our favorite activity: creating dynamic active directory groups. Here’s an example: HR keeps employees with union membership in a database, safe from prying…

project database

Troubleshoot AD with a Dynamic Exchange Distribution List

When I first heard this use case I thought the customer was crazy.  They were using an Exchange dynamic distribution list to troubleshoot Active Directory.  Sort of an early warning that their data in Active Directory was going awry.  It seemed to me that these groups were for email and that there were tools out there…

project database

Use Web-based Active Directory & Dynamic Groups to Force Updates

Having a web based Active Directory update tool allows IT to delegate Active Directory updates to the end user.  But you can do more than just put it out there and hope that end users decide to give you their cell phone number or emergency contact.  You can annoy them until they give you the…

project database

Security Threats in Healthcare

Now that the HIMSS conference has wound down, folks are starting to try to make sense of what, by all accounts, was a massive amount of new and important information to digest. One of the nuggets that I pulled out was a pressing and real concern for security in the healthcare infrastructure.   The concern was…

project database

Did Someone Forget to Deprovision Active Directory User Account?

Jackson Shaw wrote an amusing but oh-too-true story about a user who left his company, came back two years later and STILL had an Active Directory user account.  In fact, this happened to me with an old employer.  There is nothing worse than seeing all the emails that customers had sent over the previous two…

project database

Active Directory synchronization: a video how-to

In the previous chalk-talk, I discussed making dynamic Active Directory security groups but I ignored an elephant in the room….what if Active Directory isn’t accurate?  What is the point of dynamically managing Active Directory group membership if you are querying against bad and/or faulty data?  To make this important functionality work, Active Directory has to…

project database

Active Directory group expiration and lifecycle

Every group has its day.  But for Active Directory groups, sometimes those days seem endless.  That is because groups (whether security groups or distribution lists) are usually only needed for a certain time period but there is no simple way to end them.  In the past, the best practice seemed to have been delete it…