Securing Active Directory Groups in the Cloud NASA made a revelation recently revealed that their attempts at moving to the cloud introduced security gaps. This came about after an internal review by NASA’s inspector general. Servers, files, and other resources were without the protections that had previously been in place with on-premise based controls. The…
Active Directory groups are used for many different purposes. Whether it be for managing security through membership in security groups or be it at establishing simple group communications through distribution groups (lists), groups provide an excellent method to logically assemble related objects together. The term “orphan” can carry with it a negative connotation. No person,…
Imagine being named XYZ in a crowd of other XYZs – a purposeless name that creates confusion and does not communicate a purpose, adding to the cognitive pile of everyone’s day-to-day tasks. Similarly, Active Directory and Azure AD groups created by users need to have naming practices based on logical grounds centered around your organization’s…
Back when your company was smaller, Active Directory group management was easy. You simply put new people into active directory and manually assigned them to groups so they were included in email and had permission to access resources like files and printers. Resetting passwords, responding to the HR emails, and getting everyone quickly online and…
Max Wertheimer, the founder of the Gestalt Theory, once stated in a borrowed and commonly referenced Aristotle philosophy that “the whole is greater than the sum of its parts”. This means that when one thing is grouped with multiple properties, it becomes stronger and can provide more value than it could alone. This concept directly…
Just as Active Directory has a user object for each network user, it has a computer object for each computer in the domain. These objects are treated as an account. As with user accounts, computer accounts provide a means for authenticating and auditing the computer’s access to the network and its access to domain resources.…