project database

You can Join an Active Directory Group, but Can You Leave?

Imanami’s GroupID has a simple yet effective method for Active Directory group self service.  We allow the group owner or Admin four choices for group security: Private: closed membership Semi-private: owner must approve membership request Semi-public: notify owner of new membership Public: open membership When you open group membership for self service, the owner(s) assign…

project database

SharePoint Security with Active Directory Automation

One of the things that jumped out at me in our recent survey seemed to be confirmed by visiting with a number of folks who stopped by our booth at TechEd.  People are using Active Directory to secure SharePoint groups! Our survey showed that nearly 50% of organizations are, and based on the conversations we…

project database

Scope your Active Directory Problem with AD Reporting Tools

I attended a great webinar by Logic Trends today.  In it they discussed their methodology to cleaning up and ensuring the long term health of Active Directory.  The first step, as always, is to identify the problem.  They have a methodology that begins with AD reporting, in fact, their own AD reporting tool covers some…

project database

Kiosk Access to Active Directory Self-Service

There are two common use cases for kiosk access to Active Directory self service.  The first one is very straight forward, allow end users the ability to log in and update their Active Directory profile or search a corporate phone book.  We have had the second one less often but often enough that we have…

project database

What are Active Directory Groups Used For?

We recently commissioned a study with Osterman Research to find out what organizations use Active Directory groups for.  Part of it is selfish, we make Active Directory group management solutions, and it would be nice to know that the market is big enough.  But the other, more important, factor is to make sure that we…

project database

Too Much Knowledge? Too Much Active Directory Permissions

I am the kind of person that thinks that a person can never know too much. Clearly I am not the person who should be in charge of securing the enterprise! I was reminded of this in a great slideshow which says 87% of organizations think that their employees have too much access to information…

project database

Dynamic Security Groups In Active Directory

I recently watched a demonstration of Forefront Identity Manager’s implementation of dynamic security groups, a feature that GroupID Automate has had since its inception.  The FIM query designer appeared to do a pretty good job and I was beginning to see where it would fit into the marketplace when at the 45 minute mark, the speaker…

project database

Deprovision Active Directory users…completely

Years ago, I heard a stat that the average user gets provisioned into 16 directories when hired and deprovisioned from only 10 directories when leaving.  For the math challenged, that leaves the ex-user active in 6 directories.  Which is, of course, a problem. Today’s IT infrastructures are big and complex and there are lots of nooks…

project database

If You Build It, Will They Come?

I just read an interesting study on CIO Insight which looked at how the success of enterprise software deployment was measured and evaluated.  There are some great details, but one of the the bottom line conclusions is that if your users are not using, then the project is seen as unsuccessful by C suite management. Nearly…

project database

Codeless Sync with Active Directory

Forefront Identity Manager (FIM) has been getting a lot of interest based on codeless sync and codeless provisioning.  Carol Wapshere talks a bit about how it’s not all it’s cracked up to be on her excellent blog, Miss MIIS.  She discusses a few key points about the limitations of FIM’s codeless synchronization and points out…