Author Archive

HTC Incredible to support Near Field Communciation (NFC) (2011-9-16)

A friend of mine is working on NFC and I wondered if my Android device would support it – well it didn’t but there is a new version of the phone in development that was just tested by the FCC for NFC compatibility. http://www.nfcrumors.com/08-17-2011/is-the-htc-incredible-s-the-next-google-wallet-enabled-nfc-phone-it-just-passed-through-the-fcc/

Putting a price on governmental security (2011-9-15)

My colleague Dmitry Kagansky sharing his insites on Security its cost to government.  http://fedscoop.com/tv/quest-federal-cto-dmitry-kagansky-on-security-in-government/

Working with Field Labels in ActiveRoles (2011-9-2)

In the past it was common to have a requirement that additional details be presented at the top of a web interface form in ActiveRoles – this would often require modification to the underlying XML making the solution difficult to maintain during upgrades. If the requirement is simple enough there is a workaround that may [...]

Smart card presentation at the AFITC (2011-8-30)

Yesterday I had the opportunity to present at the Air Force Information Technology Conference 2011 on HSPD-12 and its impact on logical access control. While preparing for this session I realized I needed to re-visit Microsoft’s PKI (Public Key Infrastructure); especially changes in Windows 2008, Vista and Windows 7 strong authentication support. The first thing [...]

Delegation over mail enabled users and contacts only (2011-8-18)

The ActiveRoles product comes with Roles (a.k.a. Access Templates) that use the native permission model to provide delegation. To perform delegation you need to identify the Role, the Trustee (in this case an OU Admin) and the scope. The first two are simple as you just select an Access Template and a user or group [...]

Setting msExchRequireAuthToSendTo during group creation (2011-8-18)

I was working with a customer who wanted the option to set the msExchRequireAuthToSendTo attribute during mail enabled group creation. The challenge is that the native Exchange console always defaults this value to TRUE making it easy for the user to forget to un-check the value after the creation of the group. Using ActiveRoles Server [...]

Quest Software, Kirk, PowerGUI, PowerShell (2011-8-1)

Dmitry Sotnikov had a good post on Kirk Monroe leaving Quest’s PowerGUI team. Kirk will be missed. http://dmitrysotnikov.wordpress.com/2011/08/01/quest-software-kirk-powergui-powershell/

Top 10 Reasons ActiveRoles Beat the Competition (2011-7-25)

I get one question frequently from both customers and colleges. “Why was ActiveRoles able to so easily beat the competition over the past seven years?” Unfortunately, there isn’t a single answer, rather it is a combination of design elements put into the product over time. Purpose Built for Active Directory -Unlike other solutions, ActiveRoles was [...]

bv-Admin EOL – RIP (2011-7-8)

Some of you may not have heard that Symantec’s bv-Admin was officially end-of-lifed and is no longer supported as of early in 2011. Originally a Windows NT management tool, later it was retrofitted to manage AD. While bv-Admin had several ground breaking features for its time, the acquisition of Bindview, development challenges and competitive pressures appear [...]

SailPoint partners with Symantec (2011-5-25)

Interesting partnership. This will certainly help Symantec gain traction in this space. http://insurancenewsnet.com/article.aspx?id=262663&type=newswires