- User Accounts - used to identify and authenticate users and allow authorized and auditable access.
- Computer Accounts - used by users to create, store and collaborate in computing activities.
- Security Groups - used to provision and facilitate authorized access to information assets.
- Group Policies - used to specify, control and protect organizational computers.
- Domain Policies - used to protect vital user accounts and passwords.
What you need to know to delegate and undelegate administration in Active Directory
Active Directory Security and Active Directory Delegation play a mission-critical role in global security and present an open challenge. A good Active Directory Audit Tool / Active Directory Reporting Tool / Active Directory Auditing Tool / Permissions Analyzer for Active Directory can help Audit Active Directory, generate Active Directory Reports and mitigate Active Directory Risks such as Active Directory Privilege Escalation, and find out who can reset your windows password. Today, even the US Department of Homeland Security runs on Active Directory.Today, tools like the Active Directory Effective Permissions Tab and Active Directory Permissions Analyzer can be used to perform Active Directory Permissions Analysis, prevent Token Bloat, Dump Active Directory ACLs, perform an Active Directory Audit and an Active Directory Access Audit.
Monday, May 24, 2010
What is Active Directory's role in delegating administration in Windows?
Tuesday, May 11, 2010
Delegation of Administration and this Blog
Active Directory thus plays a major role in accomplishing the business goals of an organization, and the ability of an organization's IT admins to successfully manage Active Directory has a direct bearing on the organization's ability to accomplish their goals.
Delegation of administration, a key capability of Active Directory, provides the means to successfully manage the various aspects of IT management, ranging from identity management to the management of management an distributed access to shared resources.
In this blog, as an experienced Windows IT admin, I will cover various issues involved in delegating administrative responsibilities. This information will hopefully help you better understand, implement and manage administrative delegation in your environment.