project database

Dynamic Active Directory Groups for Message Delivery Restrictions

Active Directory and Exchange offer a great tool for managing communication to distribution lists: message delivery restrictions.  This concept is pretty easy to understand, if you have an Exchange distribution list that you want only certain people to be able to email, you include them in the message delivery restriction.  Conversely, if you want certain…

dynamic active directory groups

Nesting Active Directory Dynamic Groups

What are Active Directory Dynamic Groups? Active Directory Dynamic Groups are the ones that dynamically maintain their memberships based on rules. These rules are applied in the form of a user-defined query, such as an LDAP query. This query is defined once and scheduled for membership update using a Dynamic Group Update job. When the…

project database

Happy April Fools’ Day at Imanami!

We aren’t big on the pranks at Imanami but we had to do at least one so we stole a page from The Office and be-jello’d our CEO’s stapler.  Be-jello’ing is sort of like bedazzling but with Jello instead of rhinestones.  I hear it’s all the rage in Paris this season. One very serious prank…

project database

Common Pitfalls in Active Directory Self-Service

I presented a webinar today on the common pitfalls in Active Directory self service.  I would link to a recording but as usual I forgot to hit that red record button at the beginning.  Luckily, Imanami has a blog so that we can save the ideas for posterity. First off, why do you want to offer…

project database

Manage Active Directory User Accounts

To manage Active Directory user accounts; that’s quite a statement.  It evokes an image of constantly working on a user account, ensuring its accuracy, checking on its well being, and probably calling the user herself every once in a while to see how life is going.  It is also one of the phrases that brings…

Computer Objects in Active Directory Security Groups

In Active Directory, a computer object is a security principal. This means that just as with a user, you can give permissions for resources and assign security group memberships to the computer. Applying permissions to Active Directory groups, more specifically, Active Directory security groups instead of OUs is a generally accepted best practice. For user…

project database

Computer Objects in AD Security Groups

A computer object is a security principal. This means that just as with a user, you can give permissions for resources and assign security group memberships to the computer.  Applying permissions to security groups instead of OUs is a generally accepted best practice.  For user objects, you can delegate part of this and automate most…

project database

Case of Active Directory Groups Multiple Owners

Managing Active Directory is a repetitive and routine task yet can be overwhelming. Group management is performed in Active Directory as a means of simplifying administration and achieving flexibility. Keeping it all orderly and secure is a challenge fraught with nuance and details that are time-consuming without the correct tools. Table Of Contents Group Owners…