Tools and features introduced with the intention of benefiting and empowering an organization can sometimes end up being misused. PowerShell is a classic example. PowerShell is a more powerful command-line interface that combines the old Command Prompt (CMD) functionality with a built-in scripting environment that can be leveraged to gain unprecedented access to a machine’s […]
How many domain admins is too many?
Administrative accounts and groups have powerful rights, privileges, and permissions to perform critical actions in Active Directory (AD), member servers, and workstations. There are four main built-in administrative groups in AD: Enterprise Admins, Domain Admins, Schema Admins, and the Administrators. Each of these groups offer varying levels of access to computers, servers, and network settings, […]
Two-factor authentication for secure access to cloud apps in hybrid AD
In an earlier post, we dealt with the benefits of single sign-on (SSO) for cloud apps in hybrid Active Directory (AD). While SSO is good in the sense that it simplifies user access to multiple cloud apps, it doesn’t adequately shield users from compromised credentials. When a user’s password is compromised in an SSO environment, […]
Single sign-on (SSO) for the cloud
Nearly every organization has some cloud-based application. Of course the common cloud apps include Microsoft Azure, Office 365, G Suite, those from Zoho and Salesforce, and more. As administrators, we want to make our jobs more efficient and we also want to reduce the load on our users whenever possible. Now with ADSelfService Plus, you […]
PowerShell Local User Management vs. Free GUI Local User Management
Microsoft has updated its PowerShell local user management commands. You can find them at https ://gallery. technet
Active Directory Recovery Management and Change Control
You Can Learn More About the ManageEngine Product Line By Going to manageengine.optrics.com The original article/video can be found at Active Directory Recovery Management and Change Control
Securing Active Directory: A Glimpse into the Future
As an MVP in Directory Services, I feel it is my job, duty, and responsibility to share, explain, and provide feedback into past, current, and future technologies that Microsoft provides with regards to Windows and Active Directory.
Creating Perfect ADManager Plus CSV Files
ADManager Plus blows away any other Active Directory management tool by letting administrators create custom user creation templates and powerful CSV user definition files. In order to leverage these CSV files, you will need to ensure that you have all of your I’s dotted and T’s crossed
Active Directory Object LDAP Syntax
A typical day of an Active Directory administrator entails working within a tool, such as Active Directory Users and Computers ( ADUC ), Active Directory Sites and Services ( ADSS ), ADManager Plus, or ADAudit Plus. These tools mask the complexities that can be hidden behind most of the objects that you are working with.
Active Directory in 2015!
Welcome to 2015! I want to thank all of my followers, loyal readers of my articles and posts , and ManageEngine customers who care about Active Directory and quality products! I want to start off the new year with a guide to Active Directory in 2015.