project database

Active Directory Roles and Security Groups

Many of our customers use Role-based Access Control (RBAC). At least that’s what they are telling us. But our products don’t actually support the traditional concept of roles, where you create the perfect role of a salesperson and assign permissions and access to that role. Our customers are getting more granular than that. It’s almost…

project database

How to Avoid Flaws in Identity Management

David Bell wrote an interesting piece in Secure Computing on how to avoid flaws in Identity Management.  The part that I really liked was how he pointed out that the IT security industry is focusing its efforts on “where” enterprises keep their critical data instead of “who” has access to it. It is this “who”…

project database

Benefit Of Dynamic AD Groups – Restore Group Membership

I’m listening to an interesting webinar about backing up and recovering Active Directory.  They make a lot of great points about why to buy a third party tool instead of relying on built in free tools.  I’m sure they’re right but one of the things that caught my attention is that the built in free…

project database

Group Management – How HR can use Existing IT solutions

Our blog usually addresses a technical audience, but this time my message is a bit more focused on one of the business units that IT supports. Human Resources and IT can and should work together.  As I have written before, the roles of the organizations are somewhat similar, and they often must work together. What…

project database

Active Directory Case Study – Self-Service & Automation

This is one of my favorite case studies because it solves two common problems, keeping both IT and end users productive.  Managing Active Directory can take up a lot of IT’s time, making sure that users and groups are accurate and useful.  And when IT’s manual processes miss something, end users’ productivity goes down. “With nearly…

project database

Nest An Active Directory Security Group? Do It Thoughtfully

I just read a great article by Rick Vanover called,  Windows security groups: To nest or not?  He asks the question because a nested security can be a bear to troubleshoot if you start getting quirky permissions issues. In the article Rick states, “I would love to say that nesting group membership is prohibited, but there are…

project database

An Alternative to Query Based Distribution Lists (QBDL)

Every once in a while I find myself describing a dynamic Active Directory group as “query based.”  This always begs the question, how does this dynamic group differ from Microsoft Exchange’s Query Based Distribution List (QBDL)? It is actually a pretty simple answer, when GroupID Automate creates a dynamic group, it actually creates the group…

project database

Active Directory Provisioning Tool

I follow Twitter pretty closely.  I use it to keep up with what the intelligentsia are saying about Active Directory, what new products are coming out, and generally the scuttlebutt on the industry.  I follow analysts, customers, writers and most importantly directory services MVPs. So I was a little surprised to see this comment recently:…

project database

Group Management with Microsoft’s BPOS

When a Microsoft customer buys group management for Microsoft’s Business Productivity Online Suite (BPOS), they are using Imanami’s self service web portal.  But they are using an older version of GroupID Self Service called WebDir that lacks some of the advanced group management features that we have innovated. There are good reasons for this, Microsoft…

project database

The Case for a Bad Word Filter in Active Directory

A search on the term “Active Directory” in Twitter brought up this item this morning: I have written about an Active Directory bad word filter before and just find it funny that within a week there is the perfect example of why you need a filter for Active Directory groups.  Of course, this twitterer is…