We recently commissioned a study with Osterman Research to find out what organizations use Active Directory groups for. Part of it is selfish, we make Active Directory group management solutions, and it would be nice to know that the market is big enough. But the other, more important, factor is to make sure that we…
I am the kind of person that thinks that a person can never know too much. Clearly I am not the person who should be in charge of securing the enterprise! I was reminded of this in a great slideshow which says 87% of organizations think that their employees have too much access to information…
I recently watched a demonstration of Forefront Identity Manager’s implementation of dynamic security groups, a feature that GroupID Automate has had since its inception. The FIM query designer appeared to do a pretty good job and I was beginning to see where it would fit into the marketplace when at the 45 minute mark, the speaker…
Years ago, I heard a stat that the average user gets provisioned into 16 directories when hired and deprovisioned from only 10 directories when leaving. For the math challenged, that leaves the ex-user active in 6 directories. Which is, of course, a problem. Today’s IT infrastructures are big and complex and there are lots of nooks…
Forefront Identity Manager (FIM) has been getting a lot of interest based on codeless sync and codeless provisioning. Carol Wapshere talks a bit about how it’s not all it’s cracked up to be on her excellent blog, Miss MIIS. She discusses a few key points about the limitations of FIM’s codeless synchronization and points out…
Do you ever look at your Global Address List (GAL) and say, “what is the point of that group? Is anyone even using it?” Chances are if the IT department is wondering that, then end users are wondering the same thing. And if that is happening, chances are you have a lot of unused distribution…
The best way to show the power of GroupID’s Active Directory provisioning is to demonstrate it in action. When at trade shows, we’ve found an interesting way to show the ease and power of Active Directory provisioning to attendees by using their own identity data. When they swipe their badge, we provision them as Active…
This use case is a bit different…you are an Exchange administrator who wants to manage your Exchange distribution lists by spreadsheets. You want to have end users give you a spreadsheet of members they want in the Active Directory group and you are going to manage it. You could use ADUC if you are a…
The directory and database infrastructure in most organizations is a tangled web of identity information. According to Microsoft, the average user needs to be provisioned into 16 directories or databases upon hire. A disturbing side-note is that same user is de-provisioned from only 10 directories or databases upon termination. But what I’m more interested in…
I had a friend who didn’t believe that anything was worth owning unless he had fixed it himself or somehow customized it. He drove an International Harvester Scout (still one of my favorite vehicles) because it could be repaired with duct tape, a screw driver, a crescent wrench and whatever liquid happened to be in our…