Product Reviews

A Single Place to Administer Many Domains

Enterprise Directory Manager provides two great interfaces and plenty of configurability to ensure business rules for directory management are enforced.

Aelita Enterprise Directory Manager allows you to directly manage users, groups and other AD objects just like you were in the MMC snap-in provided by Microsoft, and then takes off. It deals with three basic elements: Access Templates, Policy Objects, and Managed Objects. These can be applied to one or more AD domains, allowing enterprise-wide administration. Policy Objects are the elements that can be applied against one or more Managed Objects (Users, Groups, OUs, or any valid AD object). Access Templates determine who can use, create, modify or delete any aspect of EDM administration.

Product Information

Enterprise Directory Manager 4.0
Aelita Software
Powell, OH

For more Exchange tools, see "Keeping Exchange Running" in the May 2002 issue.

Enterprise Directory Manager is relatively straightforward to install, although it does require that MS SQL Server 2000 be on the network, or that you install the supplied Microsoft Desktop Engine (MSDE) on the management server. The management server is the computer that will host the service which client interfaces will connect to, either an MMC snap-in or a Web-based interface. The installation program configures a management server by default, but can be used to only install the MMC snap-in on a different computer.

Once you've installed the management server, you need to configure which domains you will manage. In doing so you need to be aware of one little quirk. Because EDM stores its information in a SQL Server database and uses the policy objects and access templates to manage those parts of Active Directory that you have defined as managed units, it also creates little security loophole that can be exploited. That is, any member of the local Administrators group of the management server effectively has full domain administration privileges on any managed domain listed in the database. This could allow Domain Admins in the domain where the management server is located to manage objects in other domains. While this can be a benefit for some organizations, I view it as a security hole that needs to be plugged by the vendor.

Enterprise Directory Manager

Enterprise Directory Manager includes web interface that can be used to perform administrative tasks or allow users to update their own information. (Click image to view larger version.)

In outward functionality what EDM delivers is very similar to ExMS 3.5. Where Aelita pulls ahead is in a cleaner user interface and an awesome Web administration tool that allows users to easily manage their own properties, provided you have configured access templates to allow them to do so. This product is not an Exchange tool per se, but because Exchange 2000 users Active Directory as a directory service, can be useful in enforcing rules that may be needed for proper Exchange 2000 operation.

While a lot of the functionality of this product can be provided by Microsoft's tools and Windows Script Host, having it all in one place will be a benefit to larger organizations. For those companies with less than 200 users, it may provide limited rewards.

About the Author

Damir Bersinic, MCSE, MCDBA, MCSA, MCT, is an independent consultant, trainer and author.


  • Windows 10 Mobile To Fall Out of Support in December

    Microsoft will end support for the Windows 10 Mobile operating system on Dec. 10, 2019, according to an announcement.

  • Get More Out of Your Outlook Inbox with TakeNote

    Brien comes across a handy, but imperfect, feature in Outlook that lets you annotate specific e-mails. Its provenance is something of a mystery, though.

  • Microsoft Resumes Rerelease of Windows 10 Version 1809

    Microsoft on Wednesday once more resumed its general rollout of the Windows 10 version 1809 upgrade, also known as the "October 2018 Update."

  • Microsoft Ups Its Windows 10 App Compatibility Assurances

    Microsoft gave assurances this week that organizations adopting Windows 10 likely won't face application compatibility issues.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.