Active Directory Security Delegation
ADManager Plus uses role-based permission management for efficient Active Directory Administration. A role is a logical grouping of permissions based on common security administration tasks. Access Control Lists (ACLs) hold the permissions associated with a Active Directory objects. Access Control Entries (ACEs) of the object's access control lists that determines security principles and the permissions associated with it.
Creating security roles is much simpler than manipulating Access
Control Lists (ACLs). The Security roles can be easily delegated
consistently to more than one user or computer or a group. This
minimizes error and ensures consistency in delegating security permissions.
Out-of-the-box Delegations
ADManager Plus comes with the built-in security roles that can
be directly delegated to the security principals to grant the following
permissions
- To reset the user password
- To unlock the user accounts
- To add or remove members from groups
- To move users to a different OU within the domain
- To move computers to a different OU within the domain
- To add/remove workstations in the domain
- To create user accounts
- To create, delete, and modify attributes of the user
accounts
|
 |
Search ACEsADManager Plus provides you the ability to search the permissions
granted to security principals, such as users, groups, and
computers. It offers you the flexibility to include the active
directory object, security principal, and the permissions
in the search criteria.
|
 |
Featured links
Other features
| Make your everyday Active Directory management tasks easy and light with ADManager Plus's AD Management features. Create, modify and delete users in a few clicks! |
Configure Active Directory Terminal Services attributes from a much simpler interface than AD native tools. Exercise complete control over technicians accessing other domain users' computers. |
|
| A catalog of almost every report that you will need from your Active Directory! Comprehensive and Reliable reporting. Schedule reports to run periodically. Manage your AD right from within the reports. |
Create and manage Exchange mailboxes and configure mailbox rights using ADManager Plus's Exchange Management system. Now with support for Microsoft Exchange 2010!! |
|
| Get rid of the inactive, obsolete and unwanted objects in your Active Directory to make it more secure and efficient...assisted by ADManager Plus's AD Cleanup capabilities. |
A complete automation of AD critical tasks such as user provisioning, inactive-user clean up etc. Also lets you sequence and execute follow-up tasks and blends with workflow to offer a brilliant controlled-automation. |
Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue
Customer Speaks
"We evaluated ADManager Plus along with several other Active Directory Management and Reporting software. After using it really made life easy for administrators. It is very understandable and fast to learn, I didn't even read the manual."
Bogdan Campeanu, Network Engineer
