I hesitate to call a QBDL by its other name, QBDG, because it isn’t a group.  In fact of all of the letters in the acronym “Q” is really the pertinent one.  The reason is that a Query Based Distribution List isn’t a list or a group, it is a query and only a query.   …

One of the primary responsibilities for IT is to actively help their organization’s users stay productive.  If the overall workload required to do that is 100 units of help, you can bet that your organization’s current capacity is somewhat south of that number, most likely less than half.  If your organization is like most, you…

I admit to being a big fan of Centrify so I was especially pleased to find this “chalktalk” they were giving on the same day that I was researching Group Based Access Control (GBAC).  The premise of my research was that Role Based Access Control (RBAC) is too limiting, trying to fit a square user into…

We all know that the economy has cut IT staffing to the bone.  While there seems to be some rebounding from the lows of last year, organizations are still running very lean. Healthcare IT organizations are in a particularly difficult place.  At the same time that their IT staff has been cut to meet shrinking budgets…

In many organizations, Active Directory provisioning consists of a series of manual processes and emails and help desk calls that ultimately finish with an employee having a network login and hopefully an Exchange email account.  It is ripe with potential for errors and just not a good use of limited resources. But then the problem…

One of the tricks of Active Directory management is the fine balance between usability for end users and performance.  A great example of this is the usability of security groups.  Active Directory security groups are an excellent tool for granting access to network resources.  You could be tempted to load up a user with security…