User lifecycle management is the first thing you should automate in your #ActiveDirectory. It will save you the most time. Check out how Adaxes can help you and tell us what you think youtu.be/EaunkbPnp0I via @YouTube

This one is debatable. What are your thoughts? Built-in AD groups have too many permissions to be used for delegation. It is recommended to create custom groups for each delegated role, based on the least privilege principle.

If you ever had a situation when you wanted to delegate certain tasks in #ActiveDirectory (e.g. allowing group owners to manage their groups) but ended up not doing it due to lack of control, then this video on Approval-Based Workflows should help you: youtube.com/watch?v=JZ05p5iN…

On-prem #Exchange supports three types of #ActiveDirectory groups – security groups, distribution groups and dynamic distribution groups. So, which ones should you use then? Check out this article by @AdamFowler_IT adaxes.com/blog/using-differ…

Inactive accounts can be a serious security threat for #ActiveDirectory Here's how you can remove them with the help of #PowerShell: adaxes.com/blog/cleanup-acti…

Common AD tasks that should be automated: ✔️ User account creation ✔️ Termination of user accounts ✔️ Account modifications/updates ✔️ Group membership management ✔️ AD cleanup Here's how you can automate all that and practically any other task: adaxes.com/active-directory_…

Once the organization grows to a reasonable size, no one admin could do absolutely anything in it. That is why you should be delegating as much tasks as you can, so that you don’t drown in routine.

#FunFridayFact There’s an actual ‘Drink’ property that comes with the default Active Directory schema. Apparently, to specify the users' favourite drinks.

Keeping all the data in your #ActiveDirectory environment consistent with your organization's standards can make the management process much easier. Here's how you can easily maintain data integrity in AD: adaxes.com/blog/how-to-maint…

How much resources does user onboarding drain from your organization? Here's how you can improve the process: adaxes.com/active-directory_…

#ActiveDirectory from A to Z. Literally. adaxes.com/blog/active-direc…

If your OUs have got shadow groups associated with them, it's important to be sure that they are always correctly populated. Here's how you can automate managing shadow groups in #ActiveDirectory and never worry about them again: adaxes.com/blog/automating-s…

When creating a new #ActiveDirectory group, try to make sure that there are no other existing groups with a similar name, so that they won’t get confused. With things like that you should always keep in mind the human factor.

Setting up a new #ActiveDirectory or changing your existing one and not sure, which OU design to pick? This article by @AdamFowler_IT can help: adaxes.com/blog/choosing-an-…

Need to automatically remove inactive users from #ActiveDirectory? Here's a free #PowerShell solution for that: adaxes.com/blog/cleanup-acti…

Studies show that 30% of enterprise users share their passwords with their colleagues. That’s a lot!

Is automation a real threat for IT jobs? Here's an interesting take on that: adaxes.com/blog/will-automat…

Here are some events you should be monitoring on a weekly basis: Changes to privileged groups Spikes in bad password attempts or account lockouts Disabling or removal of antivirus software All activities by privileged accounts Logon/Logoff events Use of local admin accounts

Shared accounts are a big pain. Especially, if users share accounts with elevated privileges. No only you won’t be able to know who’s responsible is something goes wrong, but also you won’t notice if the account gets nicked until it’s too late.

When working on the security of your #ActiveDirectory domain controllers and other servers, don’t forget about physical security. Making sure that they aren’t easily accessible is very important.