Coverys London takes technicians off the domain controllers with ADManager Plus

Business challenges

• Technicians logging on to domain controllers: Provisioning accounts required technicians to log on to the domain controllers directly, exposing the most sensitive servers in the environment to routine administrative work.
• No tiered delegation: With administration happening on the domain controllers themselves, there was no clean way to give different technicians only the level of access their role required.
• Limited reporting for cyber requirements: The team needed a repeatable way to report on empty groups, stale accounts, and service accounts to satisfy the organisation's cyber security requirements.

The problem

Coverys London's infrastructure team is responsible for Active Directory administration across the organisation, from creating and provisioning user accounts to keeping the directory clean and demonstrating that it meets the company's cyber security requirements.

The team's central concern was how account provisioning was being done. Every time a technician needed to create or manage an account, they had to log on to a domain controller to do it. That put day-to-day administrative work on the most critical servers in the environment and made it difficult to give technicians a narrower level of access appropriate to their role.

Alongside provisioning, the team needed to report regularly on the state of the directory—empty groups, stale accounts, service accounts—to meet the organisation's cyber requirements, and wanted a way to make that reporting consistent and repeatable rather than a manual exercise each month.

The solution

Coverys London deployed ManageEngine ADManager Plus to move account provisioning and Active Directory administration off the domain controllers and into a delegated, template-driven platform. Technicians no longer need to log on to a domain controller to do their work. Instead, the team has defined tiers of administration within ADManager Plus, with some technicians able to reset passwords, others able to remove objects, and so on, so that each person has only the permissions their role calls for.

Account creation templates ensure new accounts are created consistently, with the right fields populated every time, which has made provisioning both faster and more uniform across the team.

Reporting has become a continuous part of how the team operates. Coverys London runs ADManager Plus reports on empty groups, stale accounts, and service accounts, and has automated the reports on a monthly schedule so the evidence needed for its cyber requirements is produced without manual effort. The team describes the reports as highly effective, with a wide range of reporting capabilities available out of the box.

Support has been a consistent strength of the experience. Whichever ManageEngine team the infrastructure lead has contacted, the response has been prompt, with detailed follow-ups and meetings arranged where needed until the issue was fully resolved.

By combining delegated administration, templated account creation, and automated reporting in one platform, Coverys London has removed the need for technicians to work directly on its domain controllers while keeping the directory clean and its cyber reporting on schedule. The team rates its overall experience with ADManager Plus at 9 out of 10 and is highly likely to recommend it.

About ADManager Plus

ADManager Plus is an identity governance and administration (IGA) solution that simplifies identity management, ensures security, and improves compliance. With ADManager Plus, manage the user life cycle from provisioning to deprovisioning, run access certification campaigns, orchestrate identity management across enterprise applications, and protect data on your enterprise platforms with regular backups. Use over 200 reports to gain valuable insights into identities and their access rights. Improve the efficiency of your IGA operations with workflows, automations, and role-based access control policies. ADManager Plus' Android and iOS applications help with on-the-go AD and Azure AD management. For more information about ADManager Plus, visit https://www.manageengine.com/products/ad-manager/.