Active Directory Management

Active Directory management made easy

Active Directory management has a key role in the IT environment of every organization. CionSystems provides a software management suite that fills critical gaps in Active Directory Management, Microsoft Azure, Office 365, and Microsoft Exchange. It provides a full range of operations, Identity & Access Management, and enhanced security. It allows businesses to effectively, efficiently, and economically manage security – for both on-premise and off-premise systems, applications, and data. The software management suite consists of several distinct software modules that can be used independently or in any combination depending on the needs of each customer. 

These modules help you to. > Simplify your AD infrastructure > Increase Availability  > Lower your overall cost  > Become more efficient  > Add 2-Factor authentication > Manage GPOs > Recover AD > Achieve compliance

Some organizations adopt a reactive approach to Active Directory Management. Even with strong policies in place, waiting until something breaks and then troubleshooting it is disruptive to the organization and expensive. CionSystems simplifies things by alerting you when your Active Directory changes thereby enabling you to take the corrective action.

Active Directory Management Tools

Active Directory Manager Pro

Manage your AD seamlessly with a web-based Solution

Active Directory Manager Pro provides full management of the data and information contained within an enterprise’s Active Directory environment. Unlike the Microsoft Management Console (MMC) snap-in for AD, Active Directory Manager Pro provides a rich, web-based graphical user interface that can be securely accessed using any browser from anywhere on the network: on-premise or via secure remote access methods, such as HTTP/S or virtual private networking (VPN).

AD Manager Pro allows IT staff to delegate administration across various security administrators, business units, or other delegation models, which is a key gap in Microsoft’s rudimentary tools. In addition, it supports workflows and approval processes for provisioning and access requests in Active Directory Management. The combination of secure browser access, delegated administration, and workflow capabilities solve several key problems in Active Directory Management that are not addressed by native AD tools:

Minimize human interaction (and therefore, human error) for repetitive, routine, or complex tasks using built-in automation, all without the requirement of heavy coding, customization, or scripting Create, read, update, and delete all objects managed within AD (users, organizations, resources, groups, policies, etc.) using single operations via the browser user interface, or in bulk operations by the batch import Control by role what objects and functions various delegated administrators are allowed to access and invoke within AD Manager Pro Securely manage users, their group memberships, their attributes, and their permissions to applications, SharePoint, files, printers, etc. across multiple domains.

Support for complex, multi-stage workflows and approvals Automated provisioning of AD accounts, including Microsoft Exchange mailboxes, and SharePoint and file/print permissions using the optional provisioning module Better security by providing a centralized application for managing administrative access without requiring complex cross-domain trust agreements or direct console access that are required when using native AD tools Built-in dashboard to view AD health 300 plus built-in reports covering General User Reports, Account Status Reports, Logon Reports, Group Reports, and Service Account Reports, satisfying audit and compliance requirements such as HIPAA, SOX, GLBA, and others.

You can download the Active Directory Manager Pro datasheet here

Active Directory Reporter

Comprehensive, easy to use and cost-effective Active Directory reporting Tool with over 200 out-of-the-box reports

Active Directory Reporter is a simple, easy to use, centralized, and cost-effective Active Directory management & reporting Tool. This application quickly extracts vital data from Microsoft Windows Server 2000+ infrastructure and displays it in an easy to understand format. You can easily generate advanced or general reports on Users, Objects, Contacts, Domains, OUs, Groups, GPO, Computers, Exchange, File, Printers, and other objects.

Active Directory Reporter has an extensive list of Active Directory Reports with over 200 out-of-the-box reports on the AD infrastructure resources. The web-based interface enables users with no scripting or command-line knowledge to generate reports on AD in accordance with the specific needs of the organization. The Dashboard view helps you and other IT staff to quickly view the AD object status.

Adherence to various external and internal policies can be monitored by periodically generating and analyzing the policy-related reports for Active Directory Management. The scheduled reports and notifications (such as password expiration and email inbox size limit) can be sent to one or more email addresses as needed. Over 200 reports for immediate deployment and reporting Lower the cost of your regulatory compliance to SOX, PCI, HIPAA, etc. Increase visibility into all aspects of Active Directory Seamless installation between all Windows Server editions

Active Directory Change Notifier

Proactively tracks and reports on any changes that occur within your AD domain

The Active Directory Change Notifier provides invaluable help to administrators wanting to implement proactive policies by notifying in real-time of all Active Directory changes on one or more domains.

The Active Directory Change Notifier is a flexible, easy to use Active Directory Management solution that reports changes to the Directory Services in real-time. Your Active Directory evolves throughout the day, and being aware of all the changes when they happen should be part of any IT Optimization strategy. This application enables you to work more efficiently and have the detailed knowledge necessary to make critical decisions. 

Once you configure the application you can rest assured that no changes will occur in the domain’s Active Directory without you knowing about it. The Active Directory Change Notifier offers real-time help so you can detect, troubleshoot, and quickly resolve Active Directory management issues by outlining what has changed and when. This Active Directory Management application issues comprehensive reports that outline the object, type, date/time, and details of what changed. The Active Directory Change Notifier will give you the full picture and eliminate a lot of the guesswork and headaches that come with not knowing when something was modified.

Multi-factor Authentication – 2FA Authentication 

Protect your Windows servers, desktops, laptops, tablets, virtual systems in enterprise and cloud 

Multi-Factor Authentication assures your data and accounts are protected and significantly reduce the chance of being hacked. It is an additional security layer for your Windows Machines that is designed to prevent anyone from accessing or using your computer, even if they know your username and password. Multi-factor authentication verification reinforces privacy, security, and data protection even when the password is compromised. Imagine unauthorized access to your computer that has everything in it locally or remotely. If the password is compromised then the following may happen:

 

> The hacker will have access to all your data, critical files, email, contacts, photos etc.
> Login to all of your internet accounts
> Pretend to be you and send unwanted or harmful emails to your contacts
> Use your account to reset the passwords for your other accounts (banking, shopping, etc.)

One of the most significant security weaknesses in any information system is the password-based single factor credential that is commonly used to authenticate a user to a system. Security experts widely advocate for replacing single factor credentials with multi-factor authentication (MFA) or two-factor authentication methods. MFA solutions are dramatically more secure due to their ability to withstand brute force, keylogger, man-in-the-middle, and other common attacks.

Multi-factor authentication is an extra layer of security that requires not only a password and username but also something that only, the user has, something only they should know or have immediately on hand, such as a physical USB disk or a mobile phone to receive OTP (One time Password), Quiz questions or an OTP to external email address. Multi-factor authentication assures your data and accounts are protected and significantly reduce the chance of being hacked from all intruders.

Active Directory Recovery Manager

Quickly and Accurately Backup and Recover Your Active Directory objects

Disasters can occur at any time, such as unwanted schema extensions or irreversible failures in your AD. Any disaster can result in lengthy unplanned downtime causing business-critical applications (Exchange, ERP, financial systems, etc) to be unavailable. If the damage to your AD is extensive, restoring your entire Domain is the fastest alternative.

Implementing the right tool for comprehensive deletion protection is critical to turning major problems into minor restores. CionSystems offers an easy-to-use, fast, online Active directory backup and restore solution. Accurate backups and recovering quickly after an outage enables you to reduce the time and costs associated with AD disasters and minimize or eliminate the impact on users throughout your enterprise.

Active Directory backup and restore automates the domain backup and recovery process enabling you to restore your AD to a point-in-time before the directory corruption occurred.

Active Directory Recovery empowers you to recover from inadvertent deletions or changes to your AD data in seconds, not hours. With its remote, online, granular restore capability, you can recover entire sections of the directory, selected objects, and individual attributes. Granular or Full Recovery of Active Directory Schedule Active directory backup Configure your backup source Server backup history On-Demand Backup

You can also do an AD password reset using the Enterprise Self-Service tool.