purchase to an request
Can I start a purchase request from a request? Or can I assign a purchase to an request?
Have you checked your ADManager Plus security score yet?
Have you ever felt like you're doing everything you possibly can to make your organization secure only to end up feeling like you missed out on something? Would it be easier if someone gave you a checklist on all the security best practices and options
How to trigger custom scripts from ADManager Plus?
You can run scripts to perform any custom actions, as per your organization's needs, as a follow up to any Active Directory management operation performed using ADManager Plus. For example, if you want a team's manager to be notified every time an employee
Of game theory and GPOs - How to configure GPO scope filters in ADManager Plus
If you are a game theory enthusiast, you are probably familiar with the 'Salami slicing tactic'. For the uninitiated, Salami slicing is a strategy where the opponent makes small but consistent moves while making sure they stay well below the threshold
The NCSAM series part-3 - Securing Internet-Connected Devices in Healthcare
It's week 3 of the cyber security awareness month and this post will be focusing on Securing Internet-Connected Devices in Healthcare. One of the most affected sectors by cyberattacks over the years has consistently been the health care sector. The demand
Deprovisioning best practices series #3: Regularly clean up stale accounts
Inactive user accounts are a major threat to an organization's security as they can be easily exploited by attackers to gain entry into the network. In order to keep the Active Directory clean and secure, it is important to ensure that inactive user accounts
Deprovisioning best practices series #2: Standardized disable and delete policies
Improper off-boarding practices put organizations at the risk of losing critical data. For example, a former employee whose access permissions were not revoked could tamper with or even steal critical data causing confidentiality breaches. It can also
Deprovisioning best practices made easy with ADManager Plus
Employee deprovisioning should ideally start well before an employee's last day in the organization. But in most organizations, complete deprovisioning of a user account and associated access permissions takes weeks or sometimes months, after an employee's
Unified HR and access management with ADManager Plus' HRMS integration
Organizations often use a HR management tool like Zoho People, UltiPro and other tools to manage their employees. But when it comes to identity and access management in these organizations, IT administrators struggle with synchronizing the HR database
Populate ADManager + Drop Down Fields directly from Active Directory
How do I configure the drop down fields in ADManager + with the values from Active Directory eg the 'Department' and 'Office' fields
How to create custom user modification templates with ADManager Plus?
What's a task that haunts IT administrators often and almost always comes as a bunch of tasks disguised as one? User Modification! It is never just one change. When one user account attribute is changed, the other dependent attribute values also need
Exclusive webinar series on cybersecurity and IAM - Reserve your spot now
Hi, Remote work is the new normal, and it isn't going away anytime soon. While most employees prefer the comfort of their homes, they don't usually have access to enterprise-grade security that on-site employees enjoy. A recent FBI report brought to
How to manage file server access permissions in bulk with ADManager Plus
If you are one of those people who say your organization is secure and you have no vulnerabilities in your access and permissions management practices, you are either using ADManager Plus to its full potential or you need to look closer. Management of
How to granularly delegate critical help desk roles with OU-based delegation in ADManager Plus
Nothing keeps the cogs of an organization turning smoothly like a well planned delegation set-up. But delegation of critical tasks should be done in a secure way adhering to the principles of least privilege to avoid both internal and external attacks.
How to manage and report on Isilon and NetApp file servers efficiently using ADManager Plus
"Oh! Absolutely any random person can walk into our office and look at any confidential document they want to!" - said no organization ever. But this is exactly what happens when access and permissions are not managed securely. Managing file servers in
How to implement help desk driven identity and access management with the Jira-ADManager Plus integration
As organizations scale up, the help desk ticket volume also grows parallelly. IT help desk tickets for password reset, user account lockouts and user provisioning often involve switching between the help desk console and other applications. Hence they
How to delegate help desk roles securely with ADManager Plus
According to this report, cybercrime costs are predicted to increase by 15 percent every year and inflict damages worth $6 trillion globally. The most important takeaway from this statistic is that companies need to make their cyber security perimeter
How to make the most of GPO reports to tighten security in your organization
The most common rookie mistake, one that is often exploited by attackers, is using Windows off-the-shelf with the default settings. There are numerous vulnerabilities that arise due to improperly configured settings. ADManager Plus' user-friendly GPO
POPIA compliance series #5: Purging all personally identifiable information(PII) of expired users
IT admins are often caught up in a revolving door of user accounts continually being provisioned and deprovisioned. While tasks like periodic clean up of stale accounts and their access and permissions are often not prioritized, they play a major part
POPIA compliance series #4: Ensuring efficient management of access to shares and servers with sensitive personal information
Managing access to shares and servers is a core objective of identity and access management (IAM). POPIA mandates that all processing of personal information pertaining to citizens of South Africa should be done lawfully and the processing organization
How to add Office 365 users to Microsoft Teams with ADManager Plus?
Microsoft Teams is a collaborative tool for business communications available with Office 365. ADManager Plus can help you assign Microsoft 365 (Office 365) users to different channels or teams in Microsoft Teams, right while provisioning their Active Directory and Office 365 accounts. You can also assign various policy packages to the users. This feature is a part of ADManager Plus' latest update. You can download the latest build here. The following steps can help you with adding users to Microsoft
The NCSAM series part-4 - Future of connected devices
It's week 4 of the cyber security awareness month and this post will be focusing on the Future of connected devices. Devices are becoming more sophisticated and are having a bigger impact on our daily lives, especially with IoT in play. Devices will
Identity Governance Myth #3: IG is not cloud applications friendly
Contrary to this, IG is even more important in cloud, as the data there is not inside your organization's perimeter or boundary. As data security is important in could environments as well, it is imperative to clearly define the roles and their corresponding
Identity Governance Challenge #4: How to automate revoking permissions of deprovisioned user accounts?
Insider threats arise from two kinds of employees. The first is negligent employees and the second kind would be employees with malicious intent. The second category consists of employees currently with the organization and those who've quit. While the first category can be dealt with by creating awareness about potential security threats, the second category is more complex. Ensuring principal of least privileges can help avoid threats from employees who are with the organization. To protect the
Identity Governance challenge #3: How to keep track of who has what level of access to critical data using ADManager Plus?
According to a CyberSecurity Insiders threat report, 70 percent of users have more access privileges than required. Some common reasons for this include bulk approvals for access requests, improper implementation of user's changes in roles or departments, not having a proper system to verify and grant privileges, and not reviewing access privileges frequently. The simplest way of keeping track of all these is to use ADManager Plus' built-in reports on folders accessible to a specific user, permissions
Identity Governance challenge #2: How to set up an organization-wide approval process for Identity Management operations?
One of the major challenges organizations face in Identity Governance (IG) is the lack of a well-defined approval mechanism for authorizing access to resources and user rights. ADManager Plus' approval based workflow can help you review and approve all IG related operations with a well defined ticketing mechanism and manage approval hierarchies with ease. The following steps will guide you through the process. 1. Navigate to Workflow > Configuration > Business workflow. 2. Enter a suitable Name and
Identity Governnce challenge #1 : How to standardize access policies for better Identity governance with ADManager Plus?
With the Identity Governance landscape evolving quickly, one can never be too prudent about choosing the access management policy model for their organization. Based on their users, applications and resources, organizations choose between Role based access control (RBAC), Attribute based access control (ABAC) or a hybrid of both. ADManager Plus provides the following capabilities to manage and regulate users' access that help your organization standardize access policies, Rule based access
Identity Governance challenges - a quick understanding
If you had to make a check-list of things to focus on, so you can keep your organization secure while ensuring it is at its productive best, Identity Governance (IG) will definitely be in the top half of the list. IG ensures the right people have right access to the right resources at the right time. Implementing this involves having a standardized process and a constant updation of access policies, which is tedious and time-consuming. Hence, most organizations end up heading down the primrose path
How to schedule reports in ADManager Plus?
Active Directory reports of ADManager Plus are handy when it comes to tracking internal processes and getting an overview of the IT environment in your organization. Manually generating these reports every time you need them could quickly become a hassle. ADManager Plus not just makes it easy to generate reports on demand but also allows you to schedule reports to automatically generate and deliver them periodically to the stakeholders' mailbox. Follow these steps to schedule multiple reports in
User Provisioning series - part - 6
Over the last few weeks, we have been explaining how to automate user provisioning, set up HR-driven user provisioning, and more. If you missed them, click here to catch up. Automation coupled with a well-defined workflow helps accelerate the user provisioning process while also ensuring adherence to compliance standards. For example, with the use of workflows, you can ensure that user accounts are created only after the necessary approvals of designated authorities such as HR managers, financial
User Provisioning series - part - 5
Over the last few weeks, we had been putting up explainers on how to automate user provisioning, set up HR-driven user provisioning, and more. If you missed it, click here to catch up on it. Often, organizations delegate tasks like help desk operations, user provisioning, IT asset management, etc. for ease of administration. ADManager Plus' granular delegation functions allow the administrator to ensure security best practices, like granting only minimum access, are met. Delegate management and
User Provisioning series - part -4
Over the last few weeks, we had been putting up explainers on how to automate user provisioning, user provisioning by importing CSV file and more. If you had missed it, click here to catch up on it. This week's post will take you through through the steps to automatically create user accounts whenever new records are added in HR applications like Workday, BambooHR, Zoho People. Keeping employee information in sync across directories in an organization is now made simple with ADManager Plus integrating
User Provisioning series - part -3
Last week's article was a detailed guide on creating customized user provisioning templates. If you missed it, click here to catch up on it. This week's post will take you through automating bulk user provisioning with CSV import options. How to automate user provisioning with a CSV file using ADManager Plus? Navigate to Automation tab > Automation > Create New Automation Configure the following settings. Automation policy Name and Description - Enter a suitable name and description for the
User Provisioning series - part -2
Last week's article was a detailed guide on customized user provisioning templates. If you missed it, click here to catch up on it. This week's post will take you through using the CSV import option for user provisioning in bulk. Provisioning user accounts, along with the desired rights and group membership, is a critical task for IT admins. ADManager Plus' CSV import option coupled with the customizable user creation templates makes it a convenient and safe solution for easy bulk user provisioning.
Why should you automate Active Directory provisioning?
When we have moved on to mobile phones from the traditional wired telephones, why still struggle with the traditional methods when it comes to Active Directory management? Manual user provisioning with native AD tools and scripting can be quite burdensome for IT admins, making it a time-consuming and a risk- prone process. Using these conventional ways of managing Active Directory is like sticking to wired telephones, ignoring the benefits and mobility that cellphones offer. Here is how ADManager
How to manage your Active Directory, on-the-move with the ADManager Plus mobile app?
ADManager Plus' mobile application offers Active Directory admins complete control over their user accounts and AD tickets irrespective of whether they are at work, home or anywhere in between. Some key management actions you can perform from the app include, AD user management - Create Users, reset passwords, unlock, enable/disable, and delete user accounts. AD users' group membership management - Manage group memberships of users and set primary group for AD users. AD computer management - Reset computer
How to view and manage the Terminal Services properties of Active Directory users?
ADManager Plus can help simplify the reporting on terminal services properties of AD Users with the Users' Terminal Service Properties report. It lists the properties of all users or users from specific OUs in a click. Right from the reports page, you can also: - Modify the terminal services properties of users. - Perform user management actions such as password reset, modifying logon hours, enabling/disabling user accounts, and more. - Export the Terminal Services Properties report to CSVDE, HTML,
How to view and export a list of Active Directory users with Dial-in access permission?
ADManager Plus' Dial-In access permission reports contain a list of Active Directory users who have Dial-in access. With a lot of organizations resorting to working remotely, the Dial-in Access reports with options to change the permission from within the report itself, would be useful for both monitoring and managing Dial-In access permissions of users. Steps to generate the Dial-In Allow Access report: Click the Reports tab. Go to User Reports. Go to General Reports, and click the Dial-in Allow
How to deprovision users along with their Office 365 accounts, home folders and profiles, using ADManager Plus
As opposed to the native Microsoft environment, ADManager Plus allows you to simultaneously delete all the linked home folders, profile, Office 365 accounts, Exchange mailboxes, and more, while deleting an AD user account. Steps to deprovision users and their linked Office 365 accounts, home folders, and roaming profiles using ADManager Plus: 1. Login to ADManager Plus and navigate to the Admin tab. 2. Click the Delete/Disable policy in the left pane. 3. Under the Delete Policy: a. Select the Domain
How to provision Office 365 user accounts for existing AD users via ADManager Plus
ADManager Plus, a web-based Active Directory (AD) management and reporting solution, also doubles as an Office 365 management and reporting platform. It allows you to provision/deprovision AD and Office 365 users simultaneously; modify attributes of multiple users at once; and block, unblock, or delete Office 365 users in just a few clicks. Steps to create Office 365 accounts for existing AD users: Logon to the ADManager Plus console and go to the Office 365 tab. Click on the Management operation
Next Page