We’ve spent a lot of time and effort on this blog working to educate you on best practices around specific aspects of AD group management, such as roles for delegation, the use of dynamic memberships, defining Active Directory health, and more. All of these blogs are part of a larger view of groups – one…
I recently wrote about the cost of managing Active Directory groups, where a look was taken at how calculating what it truly costs your organization to manage groups within AD. For organizations large and small, the costs (relatively speaking) are material. And those material costs only revolve around IT reacting to the requested changes made…
In keeping with our mantra of Better Groups, Better Security, we look for great ways you can improve your security through better group management. While the amount of work needed to add a single user to a group takes the smallest of efforts, it’s when you make a conscious effort to improve the security of…
Groups are the lifeblood of companies and organizations of every size with in their on-premise and hybrid environments. They are the foundation for security and accessibility to resources and email functionality. The challenge is keeping them updated and current after they are created. In many cases, IT is tasked (via tickets) to add and subtract…
When we talk about consolidating Active Directory groups, we refer to the process of cleaning up the clutter of groups accumulated over the years, so that only the relevant groups exist in the directory. Consolidating Active Directory groups is one of the most daunting tasks that IT administrators must undertake. Poor cleanup procedures can expose…
Who’s in charge here, anyway? Even if you have only a modicum of proper group management in place, your groups should at very least have some documentation of (a) how a given group is being used in the Notes field and (b) who is responsible for the group in the Managed By field, for the…
If you’re like most IT professionals, you don’t bother to update an Active Directory group’s membership. What’s the big deal? You may have read our articles about the realities of IT not focusing on groups or about the importance of putting some basic management in place — or better yet, a full group management lifecycle…
Group management in Active Directory is so much more than just making sure that memberships are correct. There’s an entire lifecycle process devoted to improving the management of groups — and the security they represent. But for many of you, there simply isn’t enough time (yet) to devote to implementing an entire group lifecycle. So,…
Managing Active Directory (AD) is not an easy task, but someone has to do it. If this “someone”, is you, then you should always keep in mind that human beings make mistakes and have bad habits, even if they are AD gurus. To minimize the risk of such bad habits from happening on your watch,…
It seems that any tasks that are “tech-related” fall into the hands of IT. It’s been that way as long as I can remember. Managing groups in Active Directory is no different: It is something that IT takes care of — mostly because groups exist within a system (Active Directory) for which most users haven’t…