Tapping into Active Directory’s Full Potential -- Redmondmag.com

Product Reviews

Tapping into Active Directory’s Full Potential

Once you set up AD, who’s going to maintain it all? These four tools address delegation and management challenges.

By Chip Andrews
02/01/2001

OnePoint Directory and Resource Administrator is a proxy-based AD delegation tool in the same vein as bv-Admin. NetIQ, however, has thrown in a few bells and whistles to sweeten the deal. For example, the product features an excellent HTML interface to ease the distribution of software deployment for all the new delegation going on in your enterprise, and it has a highly polished look and feel. While the base Directory and Resource Administrator product doesn’t work with Exchange directories or perform migrations, NetIQ has product offerings to fill those gaps if you need them.

OnePoint Directory and Resource Administrator installation went without a hitch and even set up Web-based administration pages and IIS metabase settings. Reporting is implemented via a runtime version of Microsoft Access. While this certainly saved the developers at NetIQ some time, it does leave the user with a somewhat disjointed experience as remote users can’t as easily gain access to reporting as they can to their administrative tasks via the HTTP interface.

OnePoint Directory and Resource Administrator has one of the better-designed interfaces. (Click image to view larger version.)

It’s obvious that more time and effort went into the interface and usability of OnePoint Directory and Resource Administrator than into several of the other products reviewed combined! But potential buyers are once again warned to make sure they fully understand the repercussions and scalability concerns of deploying a proxy solution before heading down that road. I hope NetIQ will better integrate reporting capability into its product; but if you want a mature AD delegation tool, OnePoint Directory and Resource Administrator shouldn’t be overlooked.

About the Author

Chip Andrews, MCSE+I, MCDBA is a software security architect at (Clarus Corp.). Chip maintains the (sqlsecurity.com) Web site and speaks at security conferences on SQL Server security issues.

Featured

What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.
Fallout from Microsoft's 'Midnight Blizzard' Saga Hits Feds

When the Russian attack group Midnight Blizzard successfully breached Microsoft corporate e-mail accounts late last year, it apparently managed to steal U.S. government agency e-mails, too.