project database

Mail Enable an Active Directory Security Group or Not?

In a recent conversation with a GroupID customer, we were made aware that they don’t allow mail-enabled Active Directory security groups. Another customer in the same meeting wished to disable the ability of mail-enabling security groups altogether. So, it left us wondering why IT Administrators are hesitant to mail enabling security groups? Before digging down…

project database

The 3 Most Common Dynamic Active Directory Groups

Maintaining the accuracy of all Active Directory groups is important but as George Orwell may have said (and I’m paraphrasing here), “All Active Directory groups are equal, but some Active Directory groups are more equal than others.”  I say this because some Active Directory groups have to be accurate.  And because some are easier to keep…

project database

Active Directory Group Membership Report

One of the beautiful things about our modern world is the availability of information.  If you ask, you are bound to find it.  One of my responsibilities is finding out what people are asking about Active Directory & Exchange.  You would think it would be big picture items: “Can Active Directory be put in the…

project database

How to Make Active Directory Groups Dynamic Using Criteria from External Database

Think about all of the data that you have in your infrastructure.  I’d bet that most of it isn’t in Active Directory.  And yet, you would still like to use it for our favorite activity: creating dynamic active directory groups. Here’s an example: HR keeps employees with union membership in a database, safe from prying…

project database

Troubleshoot AD with a Dynamic Exchange Distribution List

When I first heard this use case I thought the customer was crazy.  They were using an Exchange dynamic distribution list to troubleshoot Active Directory.  Sort of an early warning that their data in Active Directory was going awry.  It seemed to me that these groups were for email and that there were tools out there…

project database

Use Web-based Active Directory & Dynamic Groups to Force Updates

Having a web based Active Directory update tool allows IT to delegate Active Directory updates to the end user.  But you can do more than just put it out there and hope that end users decide to give you their cell phone number or emergency contact.  You can annoy them until they give you the…

project database

Distribution Lists Managed by Security Groups

Active Directory and Exchange services enable security groups to manage distribution lists. However, the capabilities around groups owning other groups are limited. Table Of Contents Why Distribution Lists are Managed by Security Groups? How Distribution Lists are Managed by Security Groups Use Cases for Distribution List Management via Security Groups List of Common Group Attributes…

project database

Group Centric Identity Management

Identity management has been defined by wikipedia (great source, I know, but bear with me) as: Identity management … is a broad administrative area that deals with identifying individuals in a system (such as a country, a network or an organization) and controlling the access to the resources in that system by placing restrictions on the…