Solving 4 of Active Directory Management’s  Biggest Problems with Simple Solutions                             Dial In: +1...
About the Speakers       Greg Shields       Greg is a Senior Partner and Principal Technologist with Concentrated       Te...
About ScriptLogic• Founded in 2000• Focus on 4 key areas:   •   Desktop Management   •   Help Desk Management   •   Server...
AD Managementis a Ticking Time Bomb
AD Managementis a Ticking Time Bomb   In no other system are the greatest responsibilities                   given to ind...
AD Managementis a Ticking Time Bomb   In no other system are the greatest responsibilities                   given to ind...
AD Managementis a Ticking Time Bomb   In no other system are the greatest responsibilities                   given to ind...
Four Big Problems:The Disgruntled AD Admin’sMust-Fix Cheat Sheet   Consider these your 2012 goals for fixing AD…       B...
Active Administrator•   Auditing•   Security•   GPO’s•   Recovery•   Accounts•   Health
Big Problem #1: AD’s Native Toolsare Terrible at Data Protection
Big Problem #1: AD’s Native Toolsare Terrible at Data Protection                   Three Clicks = Deletion
Big Problem #1: AD’s Native Tools   are Terrible at Data ProtectionOne Mis-Key = Exposure
Big Problem #1: AD’s Native Toolsare Terrible at Data Protection                          One GPO = Disaster
Time-Consuming Native Solution #1:How to Use the AD Recycle Bin                                     http://bit.ly/kFoE0m
Time-Consuming Native Solution #2:How to Backup and RestoreGroup Policy                                     http://bit.ly/...
What Does ScriptLogic Offer?•   Quick recovery of AD objects and attributes•   Recovery of passwords for AD objects•   Abi...
When Does What Apply?How Do I Roll Back Really Stupid           Things?                                   When Did That Ch...
Who Can Do What?             When Does What Apply?How Do I Roll Back Really Stupid                                   Why C...
Time-Consuming Native Solution #1:Six Best Practices in Setting Up andManaging GPO Changes                                ...
Time-Consuming Native Solution #2:Native Methods for ComparingGroup Policy Objects                                     htt...
What Does ScriptLogic Offer?•   Backup, recovery & rollback of Group Policy•   GPO history for comparing versions & change...
Big Problem #3: The Simplest ofDelegation is Scarily Complex
Big Problem #3: The Simplest ofDelegation is Scarily Complex                     Granularity that far exceeds             ...
Big Problem #3: The Simplest ofDelegation is Scarily Complex                       Too many places to delegate;           ...
Big Problem #3: The Simplest ofDelegation is Scarily ComplexPermissions that make sense toprobably four people in the enti...
Time-Consuming Native Solution #1:Kill Administrator: Fighting Back AgainstAdmin Rights                                   ...
Time-Consuming Native Solution #2:Delegating Responsibility forGroup Policy Objects                                     ht...
What Does ScriptLogic Offer?•   Role-based delegation•   Templates for easy permission delegation•   Ability to locate AD ...
Big Problem #4: WhoeverDesigned Auditing must have beenPaid by the Event Log Entry
Big Problem #4: Whoever Designed Auditing must have been Paid by the Event Log Entry  Open, Edit, Save, and Closea Notepad...
Big Problem #4: WhoeverDesigned Auditing must have beenPaid by the Event Log Entry           Windows 7 and 2008 R2 expand ...
Big Problem #4: Whoever  Designed Auditing must have been  Paid by the Event Log EntryLog data is still stored on each    ...
Time-Consuming Native Solution #1:The Guide to Building anActive Directory Auditing Script                                ...
Time-Consuming Native Solution #2:How can you Turn Raw Log Datainto Something Meaningful?                                 ...
What Does ScriptLogic Offer?•   Central auditing of AD changes•   Ability to search and filter on event data•   Automatic ...
Four Big Problems:The Disgruntled AD Admin’sMust-Fix Cheat Sheet   Consider these your 2012 goals for fixing AD…       B...
Resources            • Active Administrator               • 30 Day Evaluation              www.scriptlogic.com/AA         ...
Resources• Auditing: ChangeAuditor for AD  www.scriptlogic.com/products/change-auditor• Restore: Recovery Manager for AD  ...
“SMB IT Simplified”  www.scriptlogic.com/smbit  • Real-world articles  • Industry experts  • Vendor-agnosticConnect with u...
iPad Winner!
Questions?
Solving 4 of Active Directory Management’s Biggest Problems with Simple Solutions
Upcoming SlideShare
Loading in …5
×

Solving 4 of Active Directory Management’s Biggest Problems with Simple Solutions

2,501 views

Published on

Active Directory touches everything in a Windows environment. It’s responsible for authentication, but it’s also a permissions system, a configuration management system, and an activity monitoring system. Being mission critical it also requires guaranteed backups. Yet oddly these four activities are perhaps the most problematic for all but the most enterprise of businesses. They require deep-level knowledge, scripting experience, and hacker-level technical chops if you’re to accomplish them successfully.

In this webinar, we’ll review some of Active Directory Management’s biggest problems and provide simple solutions for fixing them:

Delegation

Backup & Restore

Group Policy Management

Auditing

Greg Shields of Concentrated Technology has been working with Active Directory since before most directories were active. He’s seen what works, and what fails miserably. And he’s ready to see how his native solutions stack up to the automated alternatives one gets with solutions like ScriptLogic’s Active Administrator. Join Greg and Todd Tobias of ScriptLogic to see where spending “time” versus “money” makes the best sense in solving 4 of Active Directory’s biggest problems.

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
2,501
On SlideShare
0
From Embeds
0
Number of Embeds
71
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide
  • Welcome to Solving 4 of Active Directory Management’s Biggest Problems with Simple SolutionsWe’ll get started in about 5 minutes to give everyone a chance to joinAfter 5 minutes:Hi everyone and welcome to Solving 4 of Active Directory Management’s Biggest Problems with Simple SolutionsI’m Ryan Oistacher of ScriptLogic and I am here today with Greg Shields of Concentrated Technology and Todd Tobias of Script Logic
  • GregGreg Shields is a Microsoft MVP and renowned author and speaker in the IT community. His work can often be seen in Microsoft TechNet Magazine and Redmond MagazineHe frequently speaks at IT events like TechMentor, the Microsoft Management Summit, Microsoft TechEd and othersToddTodd Tobias is a Product Manager at ScriptLogic with over 20 years in Microsoft platform management His specialties include AD management, backup & recovery, file server management, migration and compliance
  • Now in today’s webinar, we’re going to com
  • Single solution for extensive AD management One integrated consoleCentralized management of AD’s & Group Policy’s most important aspectsSaves time by not having to toggle from solution to solutionAnd gives the most control knowing you can do everything from a central console
  • Recovery TabSo what do you do if disaster strikes? As IT professionals, it’s our job to reduce user downtime and maintain business continuitySo Active Administrator offersFast recovery from accidental changes and administrative errorsYou can recover passwords for AD objects that you deletedYou can conveniently back up remote domain controllersAll from a central consoleTodd show us recovery
  • GPO management tabManaging GPOs:Tedious in generalSo many things can go wrongAnd I’m sure many of you have other tasks you focus on than just GPO Management. Active Administrator’s GPO Management gives you more time to focus on other tasksWith the GPO management aspect you canBackup, recover and roll back GPOsHistory to easily reference versions and changesOff-line environment for “safe” GPO testingModeling of Resultant set of policies so you can see how GPOs would work in your environmentSupport for multi forest environmentsAbility to troubleshoot problematic GPOsTodd show GPO management tab
  • Security and DelegationSo security is a big concernObjects can be accidently deleted or modifiedOver-permissioned users happen, so you’ll want an easy way to delegate the right permissions to the right usersAlso, you might be in a scenario where you want to control who can do what in Active DirectoryThat’s why Active Administrator offersSimplified and standardized security management. The ability to ensures consistent delegationAbility to search for AD objectsCentralized reportingAbility to manage multiple domains Todd show us how security and delegation works
  • Auditing complexity is increasingAbility of native tools to audit isn’tIf you have basic compliance requirements, you could benefit fromAudit trail for ADAbility to search for eventsFormatted reportsReal time alerts Event purging
  • Quest and ScriptLogic offer several other AD management solutionsActive Administrator is a great foundation for AD management, but if you want to expand intoAuditingRecoveryProvisioningGPOManagementCheck outChangeAuditor for ADRecovery Manager for ADActiveRoles ServerGPOADmin
  • Solving 4 of Active Directory Management’s Biggest Problems with Simple Solutions

    1. 1. Solving 4 of Active Directory Management’s Biggest Problems with Simple Solutions Dial In: +1 (646) 307-1720 Access Code: 327-144-572 Or use your computer speakers Greg Shields Todd Tobias Partner and Principal Technologist Product Manager www.ConcentratedTech.com ScriptLogic
    2. 2. About the Speakers Greg Shields Greg is a Senior Partner and Principal Technologist with Concentrated Technology. He is a Contributing Editor for TechNet Magazine and Redmond Magazine, and a Series Editor for Realtime Publishers. Greg is a sought-after and top- ranked speaker, seen regularly at conferences like TechMentor, Tech Ed, VMworld, and more. He is a multiple recipient of Microsoft "Most Valuable Professional" award with has received VMwares vExpert award. Todd Tobias Todd is a Product Manager for ScriptLogic, having joined the company in 2007. He has almost 20 years of experience in Microsoft platform management, having successfully managed 5 products focused on AD Management, backup & recovery, file server management, migration and compliance.
    3. 3. About ScriptLogic• Founded in 2000• Focus on 4 key areas: • Desktop Management • Help Desk Management • Server Management • Active Directory Management• Customer Base • 30,800+ customers worldwide • From SMB to Fortune 100• Headquartered in Boca Raton, Florida• Subsidiary of Quest Software since 2007
    4. 4. AD Managementis a Ticking Time Bomb
    5. 5. AD Managementis a Ticking Time Bomb In no other system are the greatest responsibilities given to individuals with the least experience.
    6. 6. AD Managementis a Ticking Time Bomb In no other system are the greatest responsibilities given to individuals with the least experience. Systems Architect / Engineer Systems Administrator Help Desk Personnel
    7. 7. AD Managementis a Ticking Time Bomb In no other system are the greatest responsibilities given to individuals with the least experience. More Responsibility Systems Architect / Engineer More Experience Systems Administrator Help Desk Personnel
    8. 8. Four Big Problems:The Disgruntled AD Admin’sMust-Fix Cheat Sheet Consider these your 2012 goals for fixing AD…  Backup and Recovery that lets you sleep at night.  Group Policy Management that’s actually useful.  Delegation of Control that won’t scare you.  Auditing that’s actually rational and useful.
    9. 9. Active Administrator• Auditing• Security• GPO’s• Recovery• Accounts• Health
    10. 10. Big Problem #1: AD’s Native Toolsare Terrible at Data Protection
    11. 11. Big Problem #1: AD’s Native Toolsare Terrible at Data Protection Three Clicks = Deletion
    12. 12. Big Problem #1: AD’s Native Tools are Terrible at Data ProtectionOne Mis-Key = Exposure
    13. 13. Big Problem #1: AD’s Native Toolsare Terrible at Data Protection One GPO = Disaster
    14. 14. Time-Consuming Native Solution #1:How to Use the AD Recycle Bin http://bit.ly/kFoE0m
    15. 15. Time-Consuming Native Solution #2:How to Backup and RestoreGroup Policy http://bit.ly/iDwwhy
    16. 16. What Does ScriptLogic Offer?• Quick recovery of AD objects and attributes• Recovery of passwords for AD objects• Ability to backup remote domain controllers• Centralized administrationDemo!
    17. 17. When Does What Apply?How Do I Roll Back Really Stupid Things? When Did That Change?
    18. 18. Who Can Do What? When Does What Apply?How Do I Roll Back Really Stupid Why Can’t I Edit Offline? Things? What Am I Actually Changing? When Did That Change?
    19. 19. Time-Consuming Native Solution #1:Six Best Practices in Setting Up andManaging GPO Changes http://bit.ly/y7Q1aN
    20. 20. Time-Consuming Native Solution #2:Native Methods for ComparingGroup Policy Objects http://bit.ly/HimenS
    21. 21. What Does ScriptLogic Offer?• Backup, recovery & rollback of Group Policy• GPO history for comparing versions & changes• Off-line repository for GPO testing• Ability to model Resultant Set of Policies (RSoP)• Support for multi-forest environments• Ability to troubleshoot problematic GPOsDemo!
    22. 22. Big Problem #3: The Simplest ofDelegation is Scarily Complex
    23. 23. Big Problem #3: The Simplest ofDelegation is Scarily Complex Granularity that far exceeds the needs of most environments
    24. 24. Big Problem #3: The Simplest ofDelegation is Scarily Complex Too many places to delegate; no way to find them later.
    25. 25. Big Problem #3: The Simplest ofDelegation is Scarily ComplexPermissions that make sense toprobably four people in the entire world.
    26. 26. Time-Consuming Native Solution #1:Kill Administrator: Fighting Back AgainstAdmin Rights http://bit.ly/Hfc18r
    27. 27. Time-Consuming Native Solution #2:Delegating Responsibility forGroup Policy Objects http://bit.ly/zIX939
    28. 28. What Does ScriptLogic Offer?• Role-based delegation• Templates for easy permission delegation• Ability to locate AD objects• Centralized reporting of permissions• Ability to manage multiple domainsDemo!
    29. 29. Big Problem #4: WhoeverDesigned Auditing must have beenPaid by the Event Log Entry
    30. 30. Big Problem #4: Whoever Designed Auditing must have been Paid by the Event Log Entry Open, Edit, Save, and Closea Notepad File = 106 New Events
    31. 31. Big Problem #4: WhoeverDesigned Auditing must have beenPaid by the Event Log Entry Windows 7 and 2008 R2 expand the original nine audit policies to over fifty!
    32. 32. Big Problem #4: Whoever Designed Auditing must have been Paid by the Event Log EntryLog data is still stored on each individual server
    33. 33. Time-Consuming Native Solution #1:The Guide to Building anActive Directory Auditing Script http://bit.ly/mY5B5T
    34. 34. Time-Consuming Native Solution #2:How can you Turn Raw Log Datainto Something Meaningful? http://bit.ly/FR0Xm3
    35. 35. What Does ScriptLogic Offer?• Central auditing of AD changes• Ability to search and filter on event data• Automatic actions based on specific events• Configurable real-time alerts• Automated event purgingDemo!
    36. 36. Four Big Problems:The Disgruntled AD Admin’sMust-Fix Cheat Sheet Consider these your 2012 goals for fixing AD…  Backup and Recovery that lets you sleep at night.  Group Policy Management that’s actually useful.  Delegation of Control that won’t scare you.  Auditing that’s actually rational and useful. So, time…or money…?
    37. 37. Resources • Active Administrator • 30 Day Evaluation www.scriptlogic.com/AA • Greg Shields www.ConcentratedTech.com
    38. 38. Resources• Auditing: ChangeAuditor for AD www.scriptlogic.com/products/change-auditor• Restore: Recovery Manager for AD www.scriptlogic.com/products/recovery-manager-for-active-directory• Provisioning: ActiveRoles Server www.scriptlogic.com/products/active-roles-server• GPO Management: GPOADmin www.scriptlogic.com/products/gpoadmin/
    39. 39. “SMB IT Simplified” www.scriptlogic.com/smbit • Real-world articles • Industry experts • Vendor-agnosticConnect with us and Win!
    40. 40. iPad Winner!
    41. 41. Questions?

    ×