Peer-Driven Insights

Active Directory

About this topic

Active Directory manages the identities and relationships of the distributed resources that make up a network environment. It stores information about network-based entities (e.g., applications, files, printers and people) and provides a consistent way to name, describe, locate, access, manage and secure information about these resources.

Active Ambassadors in This Topic

Vanshul Chawla

Nielsen

Software, 10k+

Pradeep Rao

Kyndryl

IT Services, 10k+

India

Steve Lamoureux

Desjardins

Banking, 10k+

Canada

View All Community Ambassadors

Community Posts

What are your views on the upcoming "delayed" retirement for Microsoft Identity Manager and moving to either Entra ID Provisioning or a third party tool for JML. With MIM openly being discussed to be retired at some point, are the other solutions from Microsoft mature enough, or should I stay as I am for now?

Read More Comments

Does the operational management of Identity Tools reside in IT or the CISO organization in your company?

Specifically thinking about Active Directory, Entra-ID and if it is effective to split operations of directories services away from the rest of the Microsoft Cloud services like Intune, conditional access, exchange etc.

Read More Comments

I'm interested in understanding your approach to establishing a two-way trust between Active Directories in the following scenario: A larger company A acquires a mid-sized or smaller-sized company B, at what point do you feel comfortable establishing a two-way trust between both Active Directories? The priority is to ensure business continuity without impacting their clients on both ends, while recognizing that integration would be significantly easier with a trust established. What would be your key considerations that you typically review prior to even entering discussions about this capability. My focus is on the prerequisites for trusting a new entity that was previously managed by another IT team within your organization. For example, do you conduct by default a full penetration test, assess the network and external-facing systems, perform policy health checks, evaluate conditional access settings, breach history of Company B and/or their vendors etc. and demand changes to get as close to your standard before proceeding? If yes how close do you get before feeling a little more comfortable before accepting all the risks?

Read More Comments

What current trends in enterprise integration for the automotive industry are you seeing?

Does anyone have any experience leveraging access via IAM to ERP tools and the permissions can be so granular that there would be an extreme amount of options in an IAM tool?

Read More Comments

As hybrid identity models continue across enterprises, the ability to recover both on-prem AD and cloud-based Entra ID after a compromise is now critical. From a CISO perspective, how would you describe your organization’s current hybrid identity recovery posture?

Tested and resilient - documented, tested and updated regularly40%

Documented but untested - recovery plans, but scenarios haven't been validated40%

Partial coverage - on prem AD addressed, but not Entra ID20%

Limited or no recovery plan - No approach for hybrid identity recovery

View Results

What's the best tool for automating active directory management?

Read More Comments

I'm seeking advice regarding a strategy for handling inactive accounts within directories. An auditor has requested a report on enabled accounts that haven't been logged in for over 90 days. While there are various approaches to solve this, I'm uncertain about the appropriate platform. Should this fall under the realm of a log/reporting, making it suitable for a SIEM solution (consolidating logs to generate a report)? Or does it delve deeper into an IAM concern (analyzing user accounts for inactivity and taking action)? Has anyone encountered a similar reporting or compliance scenario? I'm in search of guidance to make an informed decision on whether to approach this from a reporting angle or a more comprehensive IAM perspective. Your insights could serve as a deciding factor/tiebreaker to help me choose the most strategic path to address this scenario.

I work at a Credit Union, preparing for an M365 journey, seeking potential implementers. We need help with existing infrastructure, EOL technology (outdated), neglected processes, challenging email practices, and a technical team that can maintain and provide services. Changing the workforce mentality won't be easy, so we must succeed from the start. Looking for vendors with adaptability to our unique infrastructure and culture. Any recommendations?

We're currently using an old version of Diligent Board software and are exploring alternatives like Boardworks. Can anyone provide a comparison of Diligent Boards and Computershare Boardworks?

I would like to know how companies handle Legal Name changes in Active Directory (AD). Today we use the UPN field with the email address We send this information downstream to other applications We also have SAML for single-sign on. Could we use another field in AD to store a key and send downstream? Appreciate any feedback from people who have implemented this in their organizations. Use Case - Legal name change when married or divorced

I am looking for low cost cube/office reservation and resource management solutions. We were using RobinPowered, but wanted to move to a lower cost solution. What is everyone else using? I would love to hear about pros/cons and what costs you are paying. Gartner has a Market Strategy guide, but it is pretty dusty (2021) at this point, and the market has moved on a lot in this area, post-COVID.

To those in the SAP industry. Are you considering using low code solutions ( such as AppGyver, Pillir) for business processes automation and modernization?

Yes, investigating it14%

Yes, selected and started deployment51%

Yes, actively using19%

Maybe not sure8%

No6%

View Results

I am currently in the process of initiating negotiations with Microsoft regarding workplace solutions (O365, SharePoint), cloud services (Azure), and data center solutions, with a primary focus on SQL and Active Directory (AD). To ensure we approach these negotiations from a well-informed and competitive standpoint, I am exploring the possibility of launching a Request for Information (RFI) to Microsoft, as well as to Google.

The goal of this RFI initiative is to gather comprehensive information not only about Microsoft's offerings but also to explore alternatives, such as Google Workspace. By doing so, we aim to obtain a more thorough understanding of available solutions and, crucially, to facilitate a meaningful comparison of pricing and features.

I am reaching out to inquire if any of you have experience in conducting a similar RFI in the past. If you have previously launched an RFI in a related context and are willing to share your template or offer insights into the process, your expertise would be greatly appreciated.