When a group fails to contain the correct members, access to resources or to a network application could fail. So, ensuring that group membership is correct can go a long way in reducing calls about failures to access resources. One …
Automating user account membership in another domain
This content might be a bit of a refresher for some, but it is important to always think out of the box when dealing with Active Directory and automation. What a start, right?
Here is the question posed: “How do …
Updating Active Directory users in bulk
Do you have user accounts in Active Directory that have incorrect attribute configurations? For example, did someone add the job role to the display name for every user that is in the IT department? This is common for some or …
Managing the creation of new Active Directory user accounts with duplicate usernames
I keep getting questions about how to handle duplicate usernames during new Active Directory user accounts. Even as organizations are moving to the cloud, cleaning up AD, and merging with other companies, duplicate usernames is a hot topic.
Now, if …
Active Directory: On-the-fly bulk user management
Often, some or all users in a group need the same attribute updated for a project or some other requirement. But this can be a tricky task, especially when it comes to finding the group and then having to manually …
Active Directory: On-the-fly group management
Some of us have huge Active Directory environments, while others have smaller to medium-sized installations. Regardless of size, it can be difficult to find what you need in Active Directory due to the sheer size of your enterprise and the …
Secure inactive Active Directory users
There is no formula that tells an Active Directory administrator when or how to perform certain actions. Some feel that manual actions are best, while others feel that automation is the only way, and the rest falling somewhere in between. …
Protecting user accounts that never logged in
User accounts that were created yet the user never logged in – such user accounts are a significant security issue for all Active Directory environments. You can read more details about this security issue here.
Given the security risk …
Delete or disable users who have not logged in
Nearly every Active Directory database has at least one – a user account that was created, but the user never logged in. The reasons why the user never logged are plentiful, but the fact the user account was not …