In previous articles, we’ve discussed the reasons why IT often doesn’t pay attention managing groups in Active Directory (AD), as well as how security threats can arise from not doing so. In this article, we are going to review the steps required to manage groups in AD effectively and efficiently. Before we start, let’s establish…
In the article “Are Insider Threats IT’s Fault?,” I discussed how the lack of focus on permissions granted by groups in Active Directory (AD) could be a contributing factor to insider threats and pose a potential security risk. With over one-third of organizations reporting that they do not implement any kind of least-privilege model1, this…
Ensuring a Group Management Best Practice Building on the blog of “the case for multiple owners“, the concept of multiple owners with Active Directory Groups becomes of lesser value if those who you’ve delegated group creation to do not actually establish an owner or additional ownership as part of the creation process. Now considered a…
Active Directory groups are used for many different purposes. Whether it be for managing security through membership in security groups or be it at establishing simple group communications through distribution groups (lists), groups provide an excellent method to logically assemble related objects together. The term “orphan” can carry with it a negative connotation. No person,…
Imagine being named XYZ in a crowd of other XYZs – a purposeless name that creates confusion and does not communicate a purpose, adding to the cognitive pile of everyone’s day-to-day tasks. Similarly, Active Directory and Azure AD groups created by users need to have naming practices based on logical grounds centered around your organization’s…
Back when your company was smaller, Active Directory group management was easy. You simply put new people into active directory and manually assigned them to groups so they were included in email and had permission to access resources like files and printers. Resetting passwords, responding to the HR emails, and getting everyone quickly online and…
Just as Active Directory has a user object for each network user, it has a computer object for each computer in the domain. These objects are treated as an account. As with user accounts, computer accounts provide a means for authenticating and auditing the computer’s access to the network and its access to domain resources.…
In role based access control, security groups and distribution lists will by design, have specific associations to resources based on the need to apply a certain job function, task, or action to specific classifications of workers. The membership of security groups and/or distribution lists are adeptly managed using object attributes stored in Active Directory with…
Imanami has been saving companies money for 12 years by providing purpose-built solutions for Active Directory Group Management that automate the manual processes of managing Exchange distribution lists and security groups. On average, our customers achieve Return on Investment in a few months after purchasing and installing our automation products. The savings are seen in…
Imanami Active Directory Management Software is based on feedback from CIOs and IT Managers every step of the way. We get the feedback about market needs because we ask. We host online forms and chat rooms to discuss issues with our customers and would-be customers. Imanami’s CEO and Chief Software Architect, Robert Haaverson, makes no…