Results 1 to 7 of 7
  1. #1
    New Lounger
    Join Date
    Dec 2009
    Location
    Warren, NJ
    Posts
    7
    Thanks
    2
    Thanked 1 Time in 1 Post

    Recommend self-service tools?

    Any recommendations for self-service tools for Active Directory group management?

  2. #2
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,188
    Thanks
    47
    Thanked 983 Times in 913 Posts
    No easy method, so I stick to the MS supplied ADUC.

    What did you want to achieve?

    cheers, Paul

  3. #3
    New Lounger
    Join Date
    Dec 2009
    Location
    Warren, NJ
    Posts
    7
    Thanks
    2
    Thanked 1 Time in 1 Post

    end-user requests processing

    looking for a web-type tool to allow end-users to request/control security group membership themselves. End-users requesting access, group owners approving it, no IT contact required.

  4. #4
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,414
    Thanks
    33
    Thanked 195 Times in 175 Posts
    Sounds like you want a third-party program, no doubt costing $lots...
    BATcher

    Time prevents everything happening all at once...

  5. #5
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,188
    Thanks
    47
    Thanked 983 Times in 913 Posts
    All you need is email and a group that controls access via NTFS permissions.

    1. Create group - e.g. p_folder_name-write, the "p" is for permission.
    2. Make someone the group manager and add them to the group and put their name in the description for easy reference.
    3. Set the group to have the required permissions on the folder.
    4. Tell everyone to email the group manager.
    5. Group manager finds the group via "search" using "look for computers or people" and then adds the user.

    You can have multiple managers by granting additional users the "write members" special attribute - and add them to the description.

    Don't forget that you should use a global group for membership and a domain local group for the permissions, then add the global to the DL.

    cheers, Paul

  6. The Following User Says Thank You to Paul T For This Useful Post:

    dfd9880 (2011-09-08)

  7. #6
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,580
    Thanks
    5
    Thanked 1,058 Times in 927 Posts
    ADManager Plus appears to do what you want. I don't know anything about the product other than what is on the web site. Under the "company" link they have a fairly impressive client list.

    Quest Software has Active directory solutions but it hard to tell from the web site if the product(s) do what you need. I'm sure they'd be thrilled if you contacted them for more information.

    Joe

  8. The Following User Says Thank You to JoeP517 For This Useful Post:

    dfd9880 (2011-09-08)

  9. #7
    New Lounger
    Join Date
    Sep 2011
    Posts
    9
    Thanks
    2
    Thanked 0 Times in 0 Posts
    Or, if the issue is really about file access and sharing, your could setup SharePoint and assign the managers control over their folders to give permsission or not, and keep them out of Active Directory altogether.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •