Manage Active Directory and Exchange
The Challenge – Complexity of Microsoft Management Console and Task Pads
Leverage the power of Active Directory and Exchange with eControl. Many organisations running large or multiple Active Directory and Exchange systems struggle with account management, provisioning, self-service and audit tasks. Assigning system-wide permissions and allowing access to Microsoft Management Console or specific Task Pads in complex environments can create security concerns.
Often, too many people end up with too many permissions in Active Directory and Exchange. They end up with the “keys to the castle.” With the wrong tool, with one misguided click of a button, a user account, mailbox, etc. is gone – vanished! Who needs the nightmare of trying to report who made what changes in the case of an external security audit? And just how often do you have to provide training to new help desk staff on how to use overly complex tools? How much lost productivity is the result of trying to train non-technical staff to use complex tools to perform routine, everyday tasks. Should a Help Desk Ticket really have to be created if a user forgets his password? Why shouldn’t the user be able to reset his own password? In most cases, it’s because of the complexity and security issues related to providing these options.
There is an easier way!
eControl for Active Directory and Exchange delivers a simplified, web-based management, provisioning, self-service and audit application designed for non-technical users. eControl empowers junior administrators, help desk operators, HR staff, department managers, support staff and even end-users to perform common user account management tasks in Active Directory and Exchange – from a web browser, with NO security permissions and NO access to Microsoft Management Console or Task Pads.
These tasks include password self-service, enabling/disabling accounts, moving user accounts, resetting passwords, creating new users, creating groups, managing Exchange settings, managing distribution and group lists, unlocking intruder lockout, managing Microsoft Terminal Services and more.
With eControl, not only can you assign user self-service actions, you can delegate account and other object provisioning and management tasks to junior administrators, help desk operators, support staff and end-users. They will only be able to complete the tasks they have been assigned – only in the OUs you specify.
eControl’s full audit trail enables administrators to keep a tight rein and provide full reports on account creation and modifications. Disabling and deleting orphaned and dormant accounts can be securely delegated to junior support staff. Administrators can enforce strong password policies and reduce the risk of regulatory exposure and security liability. eControl will help you change and manage a user’s group memberships and other roles as her position changes within the organisation. eControl will improve help desk responsiveness, increase productivity, mitigate security risks and produce more accurate account data.
eControl alleviates the need to assign user access rights and permissions. This allows you to focus on high-value IT business requirements instead of security details. And, for organisations embarking on a longer-term identity management strategy, eControl delivers a very quick win, significant and immediate ROI. For example, research shows that password self-service can save as much as $650,000 per year in a typical 10,000-user organisation. User account management consumes a significant proportion of overall IT productivity. Even a 20% efficiency gain is significant.
** Source: ”What is User Life-Cycle Managment? And Why You Should Care,” META Group, June 2004, p5.
eControl’s Audit and Reporting module delivers granular, web-based access to all changes made in eControl. This module was designed to enhance internal security and compliance with legislation such as:
eControl is a powerful, yet easy-to-use, application for delegating Active Directory and Exchange tasks to support staff and non-technical users. On average, eControl takes three hours to install and configure. After 20 minutes of training, your front-line staff will be able to perform the following user account management and provisioning tasks.
Active Directory and Exchange Tasks
eControl allows you to delegate the ability to create accounts, mailboxes, resources security groups, email-enabled groups and more. New objects are created by filling out the web form associated with each create profile. You determine which create profiles can be accessed by which users. Only users with access to specified create profiles can create new objects – and only in those OUs you specify. With eControl Create, your HR or department management staff can leverage the power of Active Directory and create objects after 10 minutes of training!
eControl allows you to define user self-service options. The most popular option is user password self-service. Password self-service significantly reduces costs and user down time. Calls to the help desk for password resets decrease freeing up time and resources. Leverage the power of Active Directory by allowing users to populate their own AD values for licence plate numbers, mobile phone and pager numbers and other personal information.
Turn Exchange into a “Listserv“. Define email groups you want users to be able to subscribe to and unsubscribe from. Only those groups you have made “public” will be available to be chosen. Allow users to subscribe to public “Monthly Health and Wellness”, “For Sale”,”Wanted” or other mail lists.