The directory and database infrastructure in most organizations is a tangled web of identity information. According to Microsoft, the average user needs to be provisioned into 16 directories or databases upon hire. A disturbing side-note is that same user is de-provisioned from only 10 directories or databases upon termination. But what I’m more interested in…
I had a friend who didn’t believe that anything was worth owning unless he had fixed it himself or somehow customized it. He drove an International Harvester Scout (still one of my favorite vehicles) because it could be repaired with duct tape, a screw driver, a crescent wrench and whatever liquid happened to be in our…
An Active Directory group should only live as long as it is useful to your business. But without any native tools to expire and renew Active Directory groups, administrators turn to the time-honored, “delete it and see who complains” technique. The problem is, then you have to re-create that group, its members and permissions if…
Group Policy Objects (GPO) are not just for OUs any more. There are not a ton of GPOs that are better off applying exclusively to Active Directory groups but there are a few. The main use of GPOs filtered to Active Directory security groups is to create exceptions to group policy but there are a few…
In our LinkedIn User Group, we had a customer ask if GroupID could set the Max Send Size on messages to a group. What they are doing is delegating control of groups to their users but want to maintain control. So they have implemented the appropriate amount of workflow (on group creation, on join requests, etc). …
I worked in the HR world for quite some time. As I made the transition to a more IT focused role I was surprised at how similar some of the conversations are. Both HR and IT are striving to deliver new services and more value to the business lines they serve faster and at lower…