Fonctionnalités et Bénéfices

Key Features

Automated Provisioning - Automates user and group provisioning, including account creation in AD, mailbox creation in Exchange, and group population and resource provisioning in Windows, which helps you save valuable administrative time. ActiveRoles Server also automates re-provisioning and de-provisioning, helping to ensure an efficient administrative process over the lifetime of user account or group.
Controlled Administration - Provides a unique administrative service that acts as a firewall around AD, so you can reliably delegate control by defining administrative roles and associated permissions and rules that are strictly enforced. This is the only way to maintain compliance with security policies.
Extend Management Control - Extends management control to Unix and Linux identities, including users, groups and computers, through the optional Support Pack for Quest Authentication Services.
User Self-Service - With the simple assignment of self-service roles, end users can carry out self-administrative tasks, such as modifying their personal data through a simple to use self-service Web interface.
A Complete and Extensible Solution - In addition to strong scripting support, several optional add-on applications can be added to ActiveRoles Server to provide for advanced management capabilities.

Involve Decision-makers within Key IT Processes - Ability to accept or deny operation requests (change approval) and to monitor the execution of those requests.
Change Approval- By providing rule-based, customizable task approvals, ActiveRoles Server decreases errors and inconsistencies in the processes of directory data management, including provisioning and deprovisioning
Temporary Group Memberships - Automates the tasks of adding or removing group members that only need group membership for a specific time period. Makes it possible to add or remove members from groups on a scheduled basis.
Lower Administrative Costs - A dynamically configured Web interfaces enables users.
AD & AD LDS/ADAM Management - Provides side-by-side management of both AD and AD LDS creating a single point of administration, delegation, policy enforcement and change control for all Microsoft Directory Services. ADAM was recently renamed by Microsoft to Active Directory Lightweight Directory Services (AD LDS).
Auditing and Reporting - Provides a complete audit trail, showing who performed what actions and who tried to perform actions that were not permitted.

Key Benefits

Protects critical data by strictly enforcing policies and eliminating unregulated access to resources.
Provides a standardized change approval process for making changes to Active Directory data.
Automates provisioning, re-provisioning and de-provisioning, for efficient user lifecycle management.
Saves time and potential errors by providing automated group management.
Single point of management for AD, AD LDS/ADAM.

Simplifies Compliance and Identity Management related to regulating and reporting on user access to company resources.
Tightens the security of Active Directory by regulating administrative privileges through roles.
Lightens the IT workload by providing user self-service capabilities to directory data controlled by IT.
Reduces administrative costs by providing a dynamically configured and customized Web interface for administrators, self-service users, help desk personnel and data owners.

Technical Brief: Daily Active Directory Administration: Simplified, Streamlined – and Successful

Managing user accounts, controlling user access to resources, managing Exchange recipients and computer accounts—these are the things that occupy most of an administrator's time.

Get the Technical Brief