active directory group types

Types of Active Directory Groups

What are Active Directory Groups? Active Directory enables administrators to manage all objects and services from one centralized location rather than having to go from computer to computer to get things done. Many other programs can tie into Active Directory to manage user accounts and other objects as well. Active Directory has several built-in groups…

How Should You Define Active Directory Health?

Let’s admit it! Active Directory health check is a challenge – no matter the company size. Symptoms of Poor Active Directory Health The first indication that your organization’s Active Directory isn’t healthy is when a flood of calls comes to the help desk indicating a potential crisis is brewing. Active Directory works okay even when…

AD management

The Reality of Active Directory Group Management

Managing Active Directory groups is probably one of the simplest tasks you perform on a regular basis. It’s right up there with resetting a password. Because it takes little effort — and even less thought — it can often be easily dismissed as a routine, unimportant task. Similarly, administrators must regularly clean up user accounts and objects…

azure groupID

Azure AD Gets on the Group Expiration Bandwagon

Azure AD Gets on the Group Expiration Bandwagon I recently wrote about the need for group expiration as part of a comprehensive lifecycle approach to group management. It’s a necessary step, given the life of group objects in any of the directories you manage won’t last forever. The only exceptions, generally, lie around built-in administrative-type…

active directory group attestation

Understanding Group Attestation in Active Directory

How is your Active Directory (AD) being managed? Do you have any orphaned groups (groups without owners)? Are there groups that have outlived their purpose? Do you have users that are members of groups and they no longer need to be part of these groups? An ongoing attestation of groups is key to answering these questions.   Group objects in your directories tend to…

Expired Groups

The End of Groups: The Case for Group Expiration

Many directories contain groups so old that even you don’t know why they exist, who uses them, and what they provide access to. It’s a more common problem than you’d think.  “We should be deleting groups then, right?” might be your initial response.  And while the answer is “yes” in the short run, the reality is…

Employee System of Record

Your Directory Needs an Employee System of Record (ESR)

The advent of cloud-based applications syncing their directories with source directories like Active Directory has forced organizations to think about the validity of the directory data. Some organizations look to users to self-service their account details (with no real incentive to do so, though), while others look to IT to keep the directory current (more…

Managing

Managing LDAP groups in the Enterprise

Managing LDAP groups in the Enterprise Today’s enterprise-sized businesses have moved beyond the single on-premises directory. The need to leverage platforms and applications that reside outside the four proverbal walls of the organization have resulted in an uptick in the use of 3rd party LDAP directories within these environment, whether hosted on-prem, in a corporate…

office 365

Managing Microsoft 365 (and Office 365) Groups in the Enterprise

The shift to the cloud has many organizations focused on the productivity features available in a given cloud suite. And M365 is no exception. There’s a long list of applications in M365 – a list that’s continually growing. But, Using M365 isn’t just about productivity; it’s also about security and control for IT.  And, like…

Google Workspace management

Managing Google Workspace Groups in the Enterprise

At the core of every environment that is designed to make people productive is the need “under the hood” to be able to establish what users of that environment can do, what they can access, and – in many cases, how they can easily communicate with other users. The long-standing methodology (with a few exceptions…