A computer object is a security principal. This means that just as with a user, you can give permissions for resources and assign security group memberships to the computer. Applying permissions to security groups instead of OUs is a generally accepted best practice. For user objects, you can delegate part of this and automate most…
Managing Active Directory is a repetitive and routine task yet can be overwhelming. Group management is performed in Active Directory as a means of simplifying administration and achieving flexibility. Keeping it all orderly and secure is a challenge fraught with nuance and details that are time-consuming without the correct tools. Table Of Contents Group Owners…
In a recent conversation with a GroupID customer, we were made aware that they don’t allow mail-enabled Active Directory security groups. Another customer in the same meeting wished to disable the ability of mail-enabling security groups altogether. So, it left us wondering why IT Administrators are hesitant to mail enabling security groups? Before digging down…
Maintaining the accuracy of all Active Directory groups is important but as George Orwell may have said (and I’m paraphrasing here), “All Active Directory groups are equal, but some Active Directory groups are more equal than others.” I say this because some Active Directory groups have to be accurate. And because some are easier to keep…
Imanami was recently quoted in Windows IT Pro on Active Directory’s 10th anniversary. Part of that discussion was whether Active Directory could be put in the cloud. “That’s tough,” Haaverson says. “AD is protected with a vengeance. Why would you want to push it to the cloud? What do you do if the Internet goes…
In today’s M&A-heavy environment, GAL synchronization between two or more forests is becoming more and more important. IT departments are regularly called upon to integrate two organizations’ global address lists on the first day that the merger is complete, expecting employees to be able to see the new organizations as one even if the backend…