Active Directory Security Delegation

ADManager Plus uses role-based permission management for efficient Active Directory administration. A role is a logical grouping of permissions based on common security administration tasks. Access Control Lists (ACLs) hold the permissions associated with Active Directory objects. Access Control Entries (ACEs) of an object determine the security principals and permissions associated with it.

Creating security roles is much simpler than manipulating Access Control Lists (ACLs). The security roles can be easily and consistently delegated to more than one user, computer or a group. This minimizes errors and ensures uniformity in delegating security permissions besides making delegation a simple, trouble-free activity. This is not the case when delegation is attempted using the native AD tools or PowerShell.

You can experience the ease with which this web-based Active Directory management tool allows secure delegatio of even vital tasks like managing distribution and groups, granting remote user logon permissions, etc. using the free download of the 30-day trial version.

Out-of-the-box Delegations

ADManager Plus comes with the built-in security roles that can be directly delegated to the security principals to grant permissions to perform vital administrative tasks including:

• Reset the user password
• Unlock the user accounts
• Add or remove members from groups
• Move users to a different OU within the domain
• Move computers to a different OU within the domain
• Add/remove workstations in the domain
• Create user accounts
• Create, delete, and modify attributes of the user accounts

Search ACEs

ADManager Plus provides you the ability to search the permissions granted to security principals, such as users, groups, and computers. It offers you the flexibility to include the active directory object, security principal, and the permissions in the search criteria.

Featured links

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue