RE: [ActiveDir] Group Management

2005-07-01 Thread joe
] On Behalf Of [EMAIL PROTECTED]Sent: Friday, July 01, 2005 12:21 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Management I could not agree more with Joe on this point too. We have a bunch of business rules that work really well for us, but they definitely arent for everyone

RE: [ActiveDir] Group Management

2005-07-01 Thread joseph.e.kaplan
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, July 01, 2005 8:47 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Management JoeK... quite honestly, it almost sounds like you could sell this beast. I am sure there are things very specific to your

RE: [ActiveDir] Group Management

2005-06-30 Thread joe
to things they shouldn't as you indicate. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, June 28, 2005 11:05 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Management Hi all, sorry up front for the long post. I'm curious how

RE: [ActiveDir] Group Management

2005-06-30 Thread joe
PROTECTED]Sent: Wednesday, June 29, 2005 3:41 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Management No, it seemed to make more sense to put it in AD and keep it all in the same place. Using DN syntax attributes to represent the users and groups allows us to take advantage

RE: [ActiveDir] Group Management

2005-06-30 Thread joseph.e.kaplan
: [ActiveDir] Group Management I think you need to solve your business issues before your technical issues. The technology is certainly readily available to handle this type of work if you want to build it. However, you need to be able to feed rules into the system to follow or else the systems

RE: [ActiveDir] Group Management

2005-06-30 Thread joseph.e.kaplan
Subject: RE: [ActiveDir] Group Management I agree with JoeK, keep this info all together. I have visualized a system that synced back and forth to AD/AM though. But that was to set it up so that the ACL manipulations were in AD/AM and then any changes in AD/AM were doublechecked, logged

RE: [ActiveDir] Group Management

2005-06-29 Thread Ken Cornetet
Of [EMAIL PROTECTED]Sent: Tuesday, June 28, 2005 10:05 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Management Hi all, sorry up front for the long post. I'm curious how larger organizations manage groups in AD, with respect to authorizing users to be added to/removed from a grou

RE: [ActiveDir] Group Management

2005-06-29 Thread Ken Cornetet
PROTECTED] On Behalf Of Brian DesmondSent: Tuesday, June 28, 2005 10:15 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Management I wish we had a system to do that here. I wont create any group without the managed by attribute being populated. This way I can then pass off

RE: [ActiveDir] Group Management

2005-06-29 Thread joseph.e.kaplan
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Tuesday, June 28, 2005 11:29 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Management Did you consider using SQL to store all the metadata for the groups? Thats what Im doing now

[ActiveDir] Group Management

2005-06-28 Thread Raymond . Balaian
Hi all, sorry up front for the long post. I'm curious how larger organizations manage groups in AD, with respect to authorizing users to be added to/removed from a group. I don't mean the security around the administration, but the supporting business processes and workflows. We've just

RE: [ActiveDir] Group Management

2005-06-28 Thread Brian Desmond
] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, June 28, 2005 10:05 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group Management Hi all, sorry up front for the long post. I'm curious how larger organizations manage groups in AD, with respect to authorizing users to be added to/removed

RE: [ActiveDir] Group Management

2005-06-28 Thread joseph.e.kaplan
] Group Management Hi all, sorry up front for the long post. I'm curious how larger organizations manage groups in AD, with respect to authorizing users to be added to/removed from a group. I don't mean the security around the administration, but the supporting business processes and workflows

RE: [ActiveDir] Group Management

2005-06-28 Thread Brian Desmond
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, June 28, 2005 10:43 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Management We do the vast majority of our group management via a custom web interface. The system is self-service and requires