AD Group Management | 7 Bad Habits to Avoid

Managing Active Directory (AD) is not an easy task, but someone has to do it. If this “someone”, is you, then you should always keep in mind that human beings make mistakes and have bad habits, even if they are AD gurus. To minimize the risk of such bad habits from happening on your watch,…

IT-Business Collaboration

Managing Groups: IT Shouldn’t Do It Alone

It seems that any tasks that are “tech-related” fall into the hands of IT. It’s been that way as long as I can remember. Managing groups in Active Directory is no different: It is something that IT takes care of — mostly because groups exist within a system (Active Directory) for which most users haven’t…

AD Group Cleanup

A Case of IT Paralysis

When I was a kid, I remember playing in my room for hours on end, playing with new toy after new toy. Of course, being a kid, I never put anything away, so the number of toys just sitting around kept growing and growing. When my parents finally saw that my floor was riddled with…

Is Help Desk a Secure Approach?

Is the Service Desk a Secure Approach?

In today’s IT support model, the service desk/help desk often represents the focal point for all users to bring their needs and issues to IT. Need your password reset? Call the service desk. Need to be added to an AD group so you can get your job done? Call the service desk. Need your last…

permissions-certified

The State of Active Directory Groups: Confusion, Chaos, or Control

If you’re like most IT professionals, after a group is created, you never really give that group a second thought. Once you go to the Members tab, add a user or two, and press OK, you don’t look back. It makes sense — it’s just groups, right? I mean, who cares? Perhaps the better question…

managing-groups-the-right-way

What’s the Right Way to Manage Groups in Active Directory?

In previous articles, we’ve discussed the reasons why IT often doesn’t pay attention managing groups in Active Directory (AD), as well as how security threats can arise from not doing so. In this article, we are going to review the steps required to manage groups in AD effectively and efficiently. Before we start, let’s establish…

Paying Attention

Why Don’t Groups Get the Attention They Deserve?

In the article “Are Insider Threats IT’s Fault?,” I discussed how the lack of focus on permissions granted by groups in Active Directory (AD) could be a contributing factor to insider threats and pose a potential security risk. With over one-third of organizations reporting that they do not implement any kind of least-privilege model1, this…

Insider Threat

Are Insider Threats IT’s Fault?

Asking this question might be considered edgy, so I’ll start by answering: No. Well, not exactly — not on purpose anyway. As an IT professional, you might ask yourself, “Seriously? Insider Threats are my fault?” I’m certainly not trying to alienate you. I’ve been in IT for over 20 years and know the hard work…

Active Directory Group Security: “You Don’t Even Know”

If you were to ask what’s the most difficult part of managing Active Directory groups, we’d probably get a few different answers. Probably very few of you (if any at all) would focus on the actual creation and maintenance of the groups, while most (again, if not all) would focus on the issue of where…

Time Management

Active Directory Management Wasting Your Time? If you are like millions of other people in this world, when you look at yourself and how you manage time you may come to the conclusion that you are a procrastinator, a day-dreamer, or just someone who wastes their daylight hours on tasks that are not well prioritized.…