AD management

The Reality of Active Directory Group Management

Managing Active Directory groups is probably one of the simplest tasks you perform on a regular basis. It’s right up there with resetting a password. Because it takes little effort — and even less thought — it can often be easily dismissed as a routine, unimportant task. Similarly, administrators must regularly clean up user accounts and objects…

azure groupID

Azure AD Gets on the Group Expiration Bandwagon

Azure AD Gets on the Group Expiration Bandwagon I recently wrote about the need for group expiration as part of a comprehensive lifecycle approach to group management. It’s a necessary step, given the life of group objects in any of the directories you manage won’t last forever. The only exceptions, generally, lie around built-in administrative-type…

Employee System of Record

Your Directory Needs an Employee System of Record (ESR)

The advent of cloud-based applications syncing their directories with source directories like Active Directory has forced organizations to think about the validity of the directory data. Some organizations look to users to self-service their account details (with no real incentive to do so, though), while others look to IT to keep the directory current (more…

office 365

Managing Microsoft 365 (and Office 365) Groups in the Enterprise

The shift to the cloud has many organizations focused on the productivity features available in a given cloud suite. And M365 is no exception. There’s a long list of applications in M365 – a list that’s continually growing. But, Using M365 isn’t just about productivity; it’s also about security and control for IT.  And, like…

Let Go

Letting Go: When Users Should Be in Control

I love those ridiculous commercials for the new selling service LetGo. People are holding onto an item that they just can’t seem to part with, despite the peril it may be putting them in. Like the one where the guy has the heavy bowling ball in one hand, and the other is grasping the bumper…

Group Management Delegation

Less Work, More Secure

I remember standing in front of a group of IT pros, talking about how to handle daunting tasks, and I jokingly asked, “By a show of hands, does anyone want to work for a living? Anyone?” I think we all know that working in IT can sometimes involve working with some very cool technologies, but…

Active Directory Scripts

The Dangers of Scripting Active Directory Group Management

Now more than ever, scripting in the Microsoft world has extended the administrative abilities of an IT pro well beyond the simple use of built-in tools. You have, in essence, an unlimited ability to automate just about any part of the administration of your Microsoft environment — including Active Directory — with Powershell and other…

Bringing Shadow IT Into the Light

Bringing Shadow IT into the Light

I’ve written and spoken many times  about the topic of Shadow IT. It’s a tech buzz phrase with a somewhat negative connotation, indicating that users are taking IT matters into their own hands and bypassing IT to solve their own challenges. For the record, when a user does this and their actions put the organization…

Active Directory Group Consolidation

5 Best Practices for Consolidating Active Directory Groups

Face it. Consolidating groups is just one of those tasks no one really wants to take on. You know that your Active Directory is filled with a ton of unused or unnecessary groups, yet they still sit there, happily existing without any supervision. See if any of these situations sound familiar: A group with no…

3 Steps to Better Group Management

Group management in Active Directory is so much more than just making sure that memberships are correct. There’s an entire lifecycle process devoted to improving the management of groups — and the security they represent. But for many of you, there simply isn’t enough time (yet) to devote to implementing an entire group lifecycle. So,…