3. Day to day tasks in Active Directory
Microsoft Active Directory is a widely used Directory service with
millions of installs worldwide .
Adding to this fact there is a lot in Active Directory that can be
Delegated or automated!
• Provisioning or Deprovisioning of Accounts
• AD Reporting
• Everyday administrative tasks such as Reset Password,
Unlock Accounts, Move Users, etc.,
(Remember, Microsoft created AD as directory service, and office
automation was never AD’s concern)
– Therefore native Active Directory tools, such as scripting, fall short of
meeting modern day requirements.
4. Why ManageEngine AD Solutions?
ADSolutions products are simple to install and easy
to configure
Cost effective on most competitively priced product
range
Perfectly scalable to organizations of various AD
Infrastructures
Web-based & accessible over the internet via Secure
Channels
Just a few clicks : Safe &Restricted Deleagtion to AD
Users without granting permission in Active Directory
5. Getting familiar with ADManager Plus...
Now, we'll look at how these shortcomings are tackled in
ADManager Plus. ADManager Plus improves on where
AD missed out.
• Non-invasive AD Delegation
• Controlled AD Automation
• Reduced efforts for Help Desk Technicians
6. Non-invasive AD Delegation:
Every administrator wants to offload his extra burden, but is afraid to do so!
Why?!
REASON: To delegate a task to someone, an administrator has to elevate
that user’s rights in Active Directory, high enough for the user to perform that
task.
This carries a lot of risks!
However, we help you delegate without INVADING your Active Directory
setup!
We never touch Active Directory rights and permissions!
7. Non-invasive AD Delegation
• We want to delegate crucial AD tasks to Level 1 tech.
But we don’t want to give them full permissions, and not
in Active Directory. We want to give them controlled
privileges.
• I'm tired of resetting other password… Is there a way I
can give it to my juniors ?
• How to delegate department based AD administration to
technicians.
8. AD Automation :
In Active Directory, several tasks are ROUTINELY done. So, a wise choice is to
automate these actions.
ADManager Plus offers “Controlled Automation”!
This means “automation” minus “fear of something going wrong”!
WORKFLOW: ADManager Plus allows you to create and implement “reviewer-
approver” model for all automated AD tasks.
9. Controlled Automation
• On approval from his PM, a System Administrator disables the
user.
• Automatically request for disabling inactive user accounts
(those who were absent for long time) every month.
• Automatically move computer accounts from “Computer”
container to another OU.
• Trace out users with soon-to-expire passwords, reset
passwords for them, and force them to change passwords at
next logon.
• Build an automated group deletion process, which can pick
out only groups that have no members.
10. What does ADSelfService Plus offer?
A 4-in-1 Turnkey SelfService Solution that works for you ROUND
THE CLOCK!!! Gives some rest to Helpdesk!
