AD Redesign / R​estructure / Tools which further Improve / Enhance Active Directory's USABILITY-CONSUMERIZATION

Hello,
This Study/Discussion can be beneficial for all of us,
As we will be able to know or find out what all is best from the both Business as well as Technical aspects to
in terms :
AD as a Service.
AD as an Application.
Checking IPD for AD does provide details which for the most part are technical which is right as these details are more of best practices irrespective of the nature of function of any company.
Still there are many tools/utilities/apps/solutions which an organization with
1. Over 60,000 users/machines
2. Over 100 Trust Relationships
3.  Manufacturing sites/locations with equipment's/machinery whose operations-functionality must not be disturbed ever...
These are few of Real and Practical scenarios Organizations has to manage and with AD once deployed you have to restrict or rather say live with it as this Directory-Service solution is not as Modular as some others are....
This could be very exhaustive as it is purely an organizations decision.
However with the help of this forum I want to know which are the best known and recommended tools/apps/solutions regarding the following: 
1. User/Employee Type Differentiation- Attribute basis, Group-Membership basis more.. which are the known and recommended tools ?
         -  Tool 1
         -  Tool 2
         -  Tool 3
2. Delegation Model -Delegation of Control/Management of AD objects (Dept./Role Specific) ?
         -  Tool 1
         -  Tool 2
         -  Tool 3
3. Control Access Rights and Privileges so that resource is only accessible by the respective dept. - Security Policies - User Rights, App-locker/Software-Restriction, NTFS permissions-Claims Token which are other known tools and which all are recommended
ones..?
         -  Tool 1
         -  Tool 2
         -  Tool 3
Thanks!
BR,
An Extremist

Hi,
With Active Directory installed, we have below tools to use to manage AD:
Active Directory Users and Computers
Active Directory Domains and Trusts
Active Directory Sites and Services
In addition, we also have below command tools:
Dcdiag, repadmin, adsiedit, ntdsutil and so on
Please also refer to the below link for Active Directory Management Support Tools
http://technet.microsoft.com/en-us/library/cc738135(v=ws.10).aspx
Regards,
Yan Li
Regards, Yan Li

Similar Messages

  • How can I change the font in the "Add Text Comment" tool, which has Helvetica as default?

    How can I change the font in the "Add Text Comment" tool, which has Helvetica as default?

    Is this for the ADD TEXT COMMENT tool?  How do you change the default font for the ADD TEXT (EDIT TEXT) TOOL?

  • I need a tool which i can create 3d subs

    i need a tool which i can create 3d subs.
    Does anyone know anything about this

    Maybe this?
    http://tritonsubs.com

  • Is there a tool which can check the version of latest version available?

    I need a tool which can check the version of latest firmware available for UCS servers. The point is avoid running old firmwares.
    If the tool can download the firmware that's like cherry on the cake.

    Hi Marsbar,
    =COUNTIF(range,"done") will return the number of cells in the specified range containing only the string "done"
    If the range is a single column, (eg. column E):
    =COUNTIF(E,"done")
    The formula is in cell A1 of the table, but may be placed anywhere (except in column E, unless it is in a Header row or Footer row).
    Regards,
    Barry

  • Any Visual tool which is helpful for DBA.....

    Is there any visual tool which is helpful for DBA to get or see the live Report,Statistics,Performance for the running Oracle Production Instances.

    Are you after free stuff or are you prepared to licence pay a licence fee?
    Inthe paid for category the obvious place to start is teh Performance Tuning package for Oracle Enterprise Manager. Quest and BMC also offer dashboard type interfaces.
    In the free stakes, there's quite a neat tool called Orasnap.
    Cheers, APC

  • How can I restore move function and type tool which abruptly became balky with Elements 8 with OS10.10.2?

    How can I restore move function and type tool which abruptly became balky with Elements 8 with OS10.10.2?

    Follow-up: I'm worried about performing any actions without input, because I don't want to back myself into a corner.
    Will resetting Firefox fix the problem (instead of creating a new places database)? https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems
    According to this article, a reset will keep browsing history, which should allow me to access my lost tabs IF it will also fix my database problem.

  • Cannot install Windows Azure Active Directory Sync tool on Server 2012 w/ SQL Server 2012

    I went to change a user password on the server today and after changing the password I logged into the SQL server to run “Import-module dirsync” & “Start-onlinecoexistencesync” in powershell in order to sync the new password with Exchange Online. After
    waiting ten minutes I tried setting up the email on the user’s PC but the new password was not being accepted. I logged into Office 365 and I got the following warning.
    "Warning: Last synced more than 3 days ago | Troubleshoot"
    So I pressed troubleshoot and the site installed a tool on the server to try and find out what the issue was. After the tool ran it told me that the version of dirsync.exe was out of date and that I should download the new one and install it. So I downloaded
    the new dirsync.exe (version 7020 I believe) and tried installing it. I kept getting error after error, different ones to boot.
    First it told me I wasn’t part of the FIMSyncAdmins group (so I added myself), then it told me that it could not connect to MIIS server,  so I tried starting it and windows said that there was a problem with the sign on used by the service so I had
    to reset the password for the local user named “AAD_bfd1d6f0cef7” which was being used by that service. The service started successfully and when I went to install it told me I could not and if the problem persisted I should uninstall the old version and reinstall.
    Looking in the log file, before I even install the software I see the following Information...
    Level: Information
    Date: 2015-03-24 12:49:17 PM
    Source: Directory Synchronization
    Event ID: 0
    Task Category: None
    "The current configuration of the Windows Azure Active Directory Sync tool is invalid. Please reinstall the Windows Azure Active Directory Sync tool."
    So I tried to reinstall (i even manually uninstalled the old version and removed the folder in C:\Program Files\ called "Windows Azure Active Directory Sync") and on reinstall I get as far as "Installing Components" and then after a little
    while it errors out with the error "The install was unable to setup a required component. Check the event logs for more information. Please try the installation again and if the error persists, contact Technical Support. "
    Looking at the log file there are a bunch of new entries, created by the installer. There's over 300 new entries and I can not post them all here due to character count restriction. you can find the log file here...
    www.clarkfreightways.com/wp-content/uploads/2015/03/dirsync_log.txt
    Can anyone tell me what is going on, I've been looking through the log files and I can see errors but I'm not sure what to do to fix it.

    Greetings!
    Wanted to know if you've hosted the DirSync tool (latest version) on a VM? Also, if this is deployed in a Production or Lab environment? If it's a lab setup, you may
    try installing the DirSync on a new VM / Server (suspecting that it could be some machine related issues).
    Here's a Support KB helping with different errors:
    http://support.microsoft.com/en-us/kb/2684395
    If its a production environment, would suggest to raise a
    Technical Support Ticket for assisting further with break-fix.
    Thank you,
    Arvind 

  • Any monitoring tool or administrative commands for Active MQ?

    Hi,
    I am looking for some monitoring tool or administrative commands for active MQ which can tell me what's happening inside the JMS.
    It would help me to understand what's happening within the JMS when publisher publish the messages and when messages are being deleted from topic.
    If you know something about it . Please let me know...
    Thanks in advance

    BTW there's a discussion forum for asking questions specifically about ActiveMQ...
    http://forums.logicblaze.com/forums/show/1.page
    in particular I think your question just got an answer there :)
    http://forums.logicblaze.com/posts/list/75.page
    James
    http://logicblaze.com/

  • Free JOSE Active Directory Reporting tool in English available!!!

    Hello,
    this FREE tool is in German language a long time available.
    NOW the English version is ready for use also. Please check if it is an option for your work.
    http://www.faq-o-matic.net/2013/08/12/jos-active-directory-reporting-english-version-is-live-now/
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Hello,
    I was surfing the threads to see what is going on until I saw this posts and I was stopped to download this tool. It is a great tool Meinolf ! I downloaded it and trying to check all the reports. So far so good my friend. Also I was amazed once I saw the
    nice "Trust Relationship" icon. Every time I run this tool I will definitely check for Trust Relationships first. :)
    In addition I was wondering how it is possible to inform you about a method in order to improve the design in this tool? 
    Regards.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • How to manage Active directory and tools to manage Active Directory

    How to manage Active directory and which tools we use?

    You can use Microsoft Active Directory management tools:
    http://technet.microsoft.com/en-us/library/aa998508(EXCHG.65).aspx
    http://technet.microsoft.com/en-us/library/aa998508(EXCHG.65).aspx
    erview of Server Message Block signing
    http://support.microsoft.com/kb/887429/en-us
    Remote Server Administration Tools for Windows 7:
    http://www.microsoft.com/downloads/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=en
    AD Admin Center:
    http://technet.microsoft.com/en-us/library/dd560651(WS.10).aspx
    http://technet.microsoft.com/en-us/library/dd560652(WS.10).aspx
    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.

  • How to get Apple ID and password that is different to iTunes store account which I have already activated and completed contracts, tax information and bank information I want to create a Paid Books Account use apple ID

    I was given this address from the Apple customer support team.
    I have an active existing iTunes store account and use the same Apple ID for signing into my iTunes Connect Account that distributes Apps.
    I have created some books using the iBook author and in order to distribute content on the iBookstore I have been told electronically that I need a new Apple ID and password that is different to iTunes store account which I have already activated and completed contracts, tax information and bank information valid until 2013?
    I want to create a Paid Books Account using the same email address, tax information and bank information. This has been most frustrating, as I cannot get passed the sign in section and there is no contact person I can speak to. I was of the understanding the iTunes connect account and the Developer programs which I paid good money for is all what I needed to be paid for selling iBooks on the iBookstore???
    I only have one email address and wish to also use it for the Paid Books Account. I have books ready to be exported and published.
    I am also having trouble locating and downloading iTunes Producer. I understand I need to have the Paid Books Account active to access the iTunes Producer program. Please help.
    See additional information below:
    What device did you use to connect to the store?  Mac computer
    Which operating system is installed?  Mac OS X v10.7.x
    What version of iTunes is installed on your computer?  iTunes 10.6
    Choose the iTunes Store or App Store for your country:  Other
    Please select your country:  Australia

    Hi Lrwill,
    If the apps that are on your son's iPad were purchased under his Dad's Apple ID, then signing your Apple ID onto the iPad will not help you with updating those apps.
    Also, if the iPad was sync'd with his Dad's iTunes library, then hooking it up to your computer/iTunes library, will require you to reset the iPad, and everything that was loaded under the other Library and Apple ID will be wiped out.
    Can you provide a little more info about what was set up under which Apple ID and what iTunes library the iPad was sync'd with?
    Cheers,
    GB

  • The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

    got event ID 4015 and source DNS-Server-Service. please suggest how to fix this issue
    The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
    Raj

    Hi
     first run "ipconfig /flushdns" and then "ipconfig /registerdns" finally restart dns service and check the situation,also you can check dns logs computer management ->Event viewer->Custom Views->Server roles->DNS.

  • How do I know which workflow has been activated for my SHC in SRM

    Hi Experts ,
    Can anyone tell me where to find which workflow has been activated to my Shopping cart in the SRM. so that it creates a PO in the backend
    To create a PO in the back end it should have a WF actiavted.
    do we can have only always one WF activated or can we have multiple WFs depending on the conditions for one scenario
    Please suggest me
    Regards
    Sairam.

    Cross-Application Basic Settings u2192 SAP Business Workflow u2192 Perform Task-Specific Cusomizing
    SAP u2192 SRM u2192 SRM-EBP u2192 SRM-EBP-WFL
           -   WS10000060 (Automatic approval)
             -   WS10000129 (One-step approval)
             -   WS10000031 (Two-step approval)
             -   WS10000276 (Approval single-level over limit)
             -   WS14000044 (Completion by purchaser)
             -   WS14000109 (Approval n-step over value limit)
             -   WS14500015 (Item approval)
             -   WS14000045 (Delete shopping cart after application error)
             -   WS10000202 (Transfer purchase requisition)
             -   WS10000215 (Resubmission of shopping cart by administrator)
    You need to check Event linkage is either Activated or Deactivated aor these above work flow . I fit is activated it shows green light.
    Muthu
    Edited by: muthuraman on Jul 29, 2008 2:38 PM

  • Active Directory error using Upgrade Mgmt Tool - BI 4.1 sp 3

    I am in the process of creating a new BI 4.1 SP 3 environment within out company.  The software has been installed and I wanted to perform a Complete Upgrade from our existing XI 3.1 sp5 environment into our new 4.1 environment.  Also, we are using Windows Active Directory authentication and AD groups for security.
    The Upgrade Mgmt Tool fails with an Active Directory Error message similar to the one below:
    Active Directory Authentication failed to get the Active Directory groups for account with ID <insert really long alpha numeric string here>; CN=<insert name of employee no longer working for the company>.  Please make sure this account is valid and belongs to an accessible domain.
    Well, the account is not valid because this executive no longer works here.  Most likely within Active Directory all groups owned by this person were transferred over to his replacement.  Is there an way to have the upgrade mgmt tool bypass this validation check?  Or does anyone have any other suggestions how to get around this error?  Once this error occurs I can't upgrade.  I guess the alternative is to do an incremental upgrade, group by group, until I find the offending group but I was wondering if there was an easier way as that will be very time consuming.

    @JRKPrasad  Thank your for your thoughtful and accurate response.  It took less than 2 minutes to update AD in BI 3.1.x and the UMT tool is off and running migrating content from BI 3.1 to our new BI 4.1 environment. 
    Again, thank you very much for reading my post and responding.  It was a huge timesaver.

  • How to keep track of which tab is currently active in the page using Session object?

    Hi,
    Just curious as to whether it is possible to have a PL/SQL event fire on an active tab.
    The reason is I want to keep track of which tab is currently active on the page is that I have "generic" forms and reports published as portlets that I wish to be able to determine from the session object what page/tab the user is coming from and apply certain restrictions etc.
    kind regards,
    Matt.
    null

    Hi Konstantina,
    Yes You can do like that 2012-->q1-->January
    Steps:
    1. Create time dimension hierarchy as by following like Total--> year--> Quarter--> Month--> if you need you can keep Description.
    2. Drag the Year column from period dimension table to the dimension hierarchy of year.
    3. Drag the quarter column from period dimension table to the dimension hierarchy of Quarter.
    4. Drag the month column from period dimension table to the dimension hierarchy of month.
    5. Drag the hierarchy to period dimension table in presentation layer.
    In Answer side keep as it as Default: drill in primary and secondary interaction under column properties.
    For more refer : http://mkashu.blogspot.com
    Regards
    VG

Maybe you are looking for