Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Controlling Active Directory in a Complex Multi-Administrator Environment


Published on

NetWrix Case Study

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Controlling Active Directory in a Complex Multi-Administrator Environment

  1. 1. NetWrix Customer Case Study Controlling Active Directory in a Complex Multi- Administrator Environment “Anytime we have a question of how an account was changed, the NetWrix solution helps us to figure out who changed it and when, and then find out from them why.”Customer:The Alaska State Legislature Shay Wilson, Network Administrator of the Alaska State Legislature IT Department.Web Site:www.legis.state.ak.usNumber of Users: 500 With a total of 60 lawmakers, the Alaska State Legislature is theIndustry: State Government smallest, but one of the most effective bicameral state legislatures in the United States. The Legislature’s IT team has several independent groupsSolution: of administrators that manage Legislature’s Active Directory. The IT teamChange Auditing discovered that changes made to the Active Directory were sometimes damaging, requiring the department to seek a solution that expandedProduct: its visibility into what changes were made and who made them. KeepingActive Directory Change Reporter track of such changes was significant in the prevention of both numerous email storms and the unnecessary undoing of valid changes, due toVendor: misunderstandings between IT administrators. These issues stemmedNetWrix Corporation from the department’s inability to trace effectively the activities of 17 ITPhone: 888-638-9749 administrators back to their origins.Web Site: Challenge: Inability to Trace Changes within Active DirectoryCustomer Profile:The Alaska State Legislature is the Active Directory change auditing is an important procedure for limitingstate legislature of the U.S. state of accidental and unauthorized changes in Active Directory, because even oneAlaska. It is a bicameral institution, single incorrect change can put an organization at risk, introducing securityconsisting of the lower Alaska breaches and compliance issues. TheAlaska State Legislature’s IT teamHouse of Representatives, with 40 understood the significance of change auditing, but lacked the capacity tomembers, and the upper house implement it. The team needed to find a proven solution to manage, monitor,Alaska Senate, with 20 members. and audit any and all changes made within its Active Directory. “We have 3 distinct and independent groups that have access to make changes in Active Directory,” said Shay Wilson, Network Administrator at the Legislature. “Sometimes there are changes made that are detrimental in some way, and we needed a way to trace what changes had been made and who made them. The groups had numerous email storms when something went wrong in AD, and they couldn’t figure out why it happened and who did it.” Copyright © NetWrix Corporation. All rights reserved.
  2. 2. NetWrix Customer CaseCase NetWrix Customer Study StudySolution: Active Directory Change Reporter Conclusion:The Alaska State Legislature’s IT team turned to The power to monitor and limit anyActive Directory Change Reporter (ADCR) to changes and errors to the Active Directorysolve its aforementioned problem. With ADCR, configuration is essential in today’sthe IT team discovered that it had access to a enterprising world, in which complianceproven tool for Active Directory audit reporting and the prevention of security breaches arewhich delivered detailed information on a daily paramount. These capabilities save companiesbasis about any and all changes that were made to time and money by streamlining the abilitythe Active Directory—including the crucial Who, to see such changes, which was the case withWhat, When, and Where questions for all changes, the Alaska State Legislature. Without suchas well the “before” and “after” values for each capabilities, tracing a single change back to aand every setting. ADCR provided the team specific administrator would otherwise be awith a report that listed changes made to Active costly, time-consuming process. The AlaskaDirectory. The data that ADCR is able to generate State Legislature simply could not affordis now playing the lead role in the team’s ability to halt and slow productivity. With Activeto monitor and audit day-to-day administrative Directory Change Reporter, the Alaska Stateactivities. Legislature’s IT team was given a viable tool to detect all Active Directory changes on the“We had considered using homebuilt VBS scripts, most detailed level. The end result for the teambut they were difficult to make, clunky, and hard was improved Active Directory managementto maintain,” said Shay Wilson. “NetWrix tools capabilities across the board— resulting in aare easy and very affordable. Anytime we have rapid ROI.a question of how an account was changed, wecan figure out who changed it and when, and find About NetWrix Corporationout from them why. It is much easier with ActiveDirectory Change Reporter than trying to ask 17 Established in 2006, NetWrix Corporationbusy people if they know the answer. This has provides innovative and cost-effectivealso prevented us from undoing changes that were solutions that simplify and automatenecessary, but we didn’t know why until we spoke the management of Windows the admin who changed it. I have also received With in-depth knowledge and experiencequick and responsive service from the managing Windows environments of all sizes, the company delivers solutions toNetWrix support team whenever I do have meet complicated business requirementsquestions (usually about new products).” while fulfilling the best expectations of IT professionals. Copyright © NetWrix Corporation. All rights reserved.