Hello all,
I'm looking to invest & implement in an AD management application and would like to know what you guys use? I know I can problably do all these this separately using mutliple tools but i'd like, ideally (password management aside which may not be possible) to keep it within one application and management interface and keep as intuitive as possible.
The problems I currently have are:
- Reporting - what is happening in AD / centralised reporting through a single console window to get a holistic view of all servers. Publish reports via email / web page etc
- Auditing - who made what change, on which server, and when - again through a single consolidate console view
- Disaster Recovery - backing up and restoring AD as simply as possible
- Delegating AD access / rights effectively - allowing IT staff to perform their jobs without being a domain administrator (I know we can do this now but it is a nightmare using Microsoft's own tools - simply not what we need, we need something more intuitive, granular and simple to use)
- AD alerting - if anyone changes domain admins membership etc or deletes an IT staffs AD account
- Scheduled reporting - automated every night etc
- Group policy - administration, reporting and delgation with tracking of historical changes inc. the ability to rollback
- Password management - self service resets and hardening of what passwords can be used (e.g. no Password1 etc)
How do you guys work with the above, and what do you use to manage these problems - I'm sure I can't be the only admin who has these issues!! ;-]
Any info and ideas would be much appreciated.
Andy
Cheers, Andy andrewDOTstoryATjameswalkerDOTbiz
