Re: Must-have Active Directory Tools

Tech-Archive recommends: Fix windows errors by optimizing your registry



1. Not needed for efficient, secure and organized AD. Can't believe anyone would consider it a must have tool.

2. My comments on ScriptLogic are pretty well known at this point.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Mike C wrote:
Thanks for the post GabriellTF- Just happened across it.

IMO, I've used tools from all of the below vendors with excepion of specopssoft. My opinon and recommendation (assuming you run a highly efficient, secure and organized AD infrastucture... or would like to):

#1 PICK - Password Reminder PRO from http://www.sysoptools.com - If you enforce a domain password expiration policy for your users, want to alert them easily when their password is expiring (lowering help desk calls from users) and want to see what is really going on with your AD user accounts. This is a 100% "must have" tool that not only gives you ability to alert users of expiring passwords but also provides a very specific reporting console for review of AD user objects, and very smartly done. It is plain awesome, and miles above using a plain ol VB script. Plus they give you a 60 day free full-vesion to try in your domain. Generous.

(BTW, they also have a "Saint" free tool that is called AD Query. It lets you look up all schema attributes associated with a user or computer object. It is a very handy free utility.)



#2 PICK- Active Administrator from http://www.scriptlogic.com. - The strong feature here is 'active templates' for AD security settings and policies. Make your security policy settings and enforce them with a template. If someone tries to change the policy on a DC, it rolls back and sends an alert to the security admin! Nice, and you no longer have to worry about enforcing AD changes in your environment or wonder 'when did that change??'.

EggHeadCafe.com - .NET Developer Portal of Choice http://www.eggheadcafe.com
.



Relevant Pages

  • Re: Dsacls - Removing SELF Write Personal Info from User Object in
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... permissions from all of the user objects in the Users container. ... I guess I'll need to write a script that would step thru each individual user object and remove SELF. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Script
    ... Our script calculates a random password based on a pattern ("Cvccvc" would ... Adding randomized values and outputting the final result to a secure text ...
    (microsoft.public.windows.server.scripting)
  • Re: JMSs Spotlight at SDCC
    ... Jan of rec.arts.sf.tv.babylon5.moderated make plain: ... If deadlines conspire to gang up on him, the script books can be ... postponed as needed as can Book of Lost Souls, ... To be determined are 'Borrowed Lives'-the script for the pilot is ...
    (rec.arts.sf.tv.babylon5.moderated)
  • Re: SSL & ASP Code ??
    ... kind based on whether the request is secure or not. ... I think you are really just asking about how to use the ASP Include ... functions inside that script content is a straightforward function call. ... Eric Carr Tribute ...
    (microsoft.public.inetserver.iis.security)
  • Re: Receiving Secure FP Web Form Data
    ... I think what you are looking for is a form.CGI to file script which, ... syntax for the form posted on a secure URL: ... FormCGI takes form input and emails you or writes out to a file, ... Using FormCGI to accept file attachments: ...
    (microsoft.public.frontpage)